Re: [rfc2461bis issue 252] Security considerations issues

2004-02-11 Thread James Kempf
= There are two issues here: a) The current Keywords used for IPsec. They should definitely be lighter (no SHOULDs, MAY at best) or removed totally. b) What to use for SEND. I have no idea about b). As for a) I think we should remove any keywords on IPsec. I tend to think MAY is appropriate

Re: [rfc2461bis issue 252] Security considerations issues

2004-02-11 Thread Steven M. Bellovin
In message [EMAIL PROTECTED], James Kempf writes: I think it might be wise to discuss whether the document should continue to recommend IPsec with the Security ADs and get some input from the community and the security directorate. draft-arkko-manual-icmpv6-sas-01.txt outlines some

[rfc2461bis issue 252] Security considerations issues

2004-02-10 Thread Soliman Hesham
This issue addresses RFC 2461's assumptions about securing ND messages. The following is needed: - explain context in which IPSec can be used to secure NDP messages. This should include a reference to the SEND work. - Expand Security Considerations section to discuss more security threats