Re: [IPsec] draft-ietf-ipsecme-ike-tcp-01 comments

2012-12-05 Thread Yaron Sheffer
Hi Yoav! On 12/05/2012 11:41 AM, Yoav Nir wrote: Hi Yaron On Dec 5, 2012, at 9:59 AM, Yaron Sheffer wrote: Hi, In general, it seems to me we are trying to solve more than we should, and we should punt on some of the NAT use cases, leave them to configuration or to out-of-protocol solutions

Re: [IPsec] draft-ietf-ipsecme-ike-tcp-01 comments

2012-12-05 Thread Yoav Nir
Hi Yaron On Dec 5, 2012, at 9:59 AM, Yaron Sheffer wrote: > Hi, > > In general, it seems to me we are trying to solve more than we should, and we > should punt on some of the NAT use cases, leave them to configuration or to > out-of-protocol solutions like STUN and friends. Maybe even DNS SRV

[IPsec] draft-ietf-ipsecme-ike-tcp-01 comments

2012-12-04 Thread Yaron Sheffer
Hi, In general, it seems to me we are trying to solve more than we should, and we should punt on some of the NAT use cases, leave them to configuration or to out-of-protocol solutions like STUN and friends. Maybe even DNS SRV registration. Specifically: - In the new text re: the Initiator s