Hi Uri and Jun, I agree - mandating use of PPK may not work. However, suggesting use of > PPK, i.e., as a (negotiable?) option would be a very good thing: those who > have the ability to employ it, and want better security - would opt in. > While those who don’t care or for various reasons cannot manage the > distribution - could opt out. >
This sounds like a good idea to me! https://github.com/smyslov/ikev2-downgrade-prevention/issues/5 Chris P.
_______________________________________________ IPsec mailing list -- [email protected] To unsubscribe send an email to [email protected]
