Re: [IPsec] Comments on draft-ietf-ipsecme-tcp-encaps

2017-03-18 Thread Yoav Nir
Hi, Eric. > On 19 Mar 2017, at 4:04, Eric Rescorla wrote: > > [Now with the right address] > > I just finished reading this document. Some comments below. > > > - You have a uniform 16 bit length field followed by a 4 byte all-zeros >sentinel value to indicate that a packet is IKE rather

[IPsec] Comments on draft-ietf-ipsecme-tcp-encaps

2017-03-18 Thread Eric Rescorla
[Now with the right address] I just finished reading this document. Some comments below. - You have a uniform 16 bit length field followed by a 4 byte all-zeros sentinel value to indicate that a packet is IKE rather than ESP. Given that in S 3 graf 2 you have a SHOULD-level requirement