On Thu, 2013-02-07 at 21:59 +0100, Ole Troan wrote: > >> as Karl pointed out, what do we do with the ESP header? > > The document needs to make a special exception for encrypted > > payloads. In that case, the ESP header must begin on the first > > fragment, but need not end on the first fragment.
Do you mean that the ESP header must be the first item in the fragmentable part of the first fragment? Or that the ESP header must be (at least partly) in the non-fragmentable part of the first fragment? If the latter, that's a new kind of animal. At present, a header is either completely in the non-fragmentable part or completely in the fragmentable part. Permitting a header to straddle the fragment header seems odd, and I can't immediately see how you could do it without changing the fragment header definition, either. Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (ka...@biplane.com.au) http://www.biplane.com.au/kauer http://www.biplane.com.au/blog GPG fingerprint: B862 FB15 FE96 4961 BC62 1A40 6239 1208 9865 5F9A Old fingerprint: AE1D 4868 6420 AD9A A698 5251 1699 7B78 4EEE 6017 -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------