[IPsec] Sorry, 5 more

2010-02-24 Thread Yoav Nir
Hi folks. 5 issues got lost in the system (they were tagged wrong). Hopefully these are really the last 5. Issue #132 - Should NO_ADDITIONAL_SAS cover rekeying IKE SAs? = In section 1.3 at the end there is text talking about the

Re: [IPsec] [Nav6tf] FYI: NIST Publication Guidelines for the secure deployment of IPv6

2010-02-24 Thread Joe Klein
Ed, I started to review the NIST SP 800-119 today. My focus has been to look at the document from both the defenders and attackers prospective, as I did with the DOD IPv6 security standards. As usual with documents from Sheila Frankel, it is well written, annotated and filled allot of useful