Re: [IPsec] RFC 4869 questions

2009-05-14 Thread Yoav Nir
Paul Hoffman wrote: IOW it's up to the initiator whether or not to do PFS, and both configurations are OK to use the suite name. That was my intention in RFC 4308; I cannot speak for the authors of RFC 4869. You can't speak for them, but Scott has to figure it out. As for lifetimes,

Re: [IPsec] RFC 4869 questions

2009-05-14 Thread Scott C Moonen
Communications Server TCP/IP Development http://scott.andstuff.org/ http://www.linkedin.com/in/smoonen From: Yoav Nir y...@checkpoint.com To: Scott C Moonen/Raleigh/i...@ibmus, ipsec@ietf.org ipsec@ietf.org Date: 05/13/2009 04:53 PM Subject: RE: [IPsec] RFC 4869 questions Scott C Moonen wrote