Re: [IPsec] how common is ESP TFC support (and signaling of non-support) ?

2016-05-31 Thread Paul Wouters
On Tue, 31 May 2016, Tommy Pauly wrote: iOS and Mac OS X do not support ESP TFC, and mark ESP_TFC_PADDING_NOT_SUPPORTED in the IKE_AUTH packets. I have not heard of problems with interop in this area. So I just did an interop, enabled TFC and it worked great with iOS :) 22:10:29.449629 IP 19

Re: [IPsec] how common is ESP TFC support (and signaling of non-support) ?

2016-05-31 Thread Tommy Pauly
iOS and Mac OS X do not support ESP TFC, and mark ESP_TFC_PADDING_NOT_SUPPORTED in the IKE_AUTH packets. I have not heard of problems with interop in this area. Thanks, Tommy > On May 31, 2016, at 9:15 AM, Paul Wouters wrote: > > > Hi vendors, > > I am wondering how common it is for stacks t

[IPsec] how common is ESP TFC support (and signaling of non-support) ?

2016-05-31 Thread Paul Wouters
Hi vendors, I am wondering how common it is for stacks to support ESP TFC ? And also, how common it is for stacks that do NOT support ESP TFC, to properly signal that with ESP_TFC_PADDING_NOT_SUPPORTED. That is, has anyone ever encountered an interop problem when enabling ESP TFC? I would be