[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: suites - phase 1 vs 2

> I believe the definition of a suite should include the protocol it
> is securing. 

Agreed.

> That means we need a minimum of two suites: one of IKE and one for
> ESP. 

Yes, and we end up with (at least) two types of suites: one for IKE
protecting itself, and one for each of the protocols that IKE manages
(whether you look at this as a single "IPsec" protocol or as
independant "AH", "ESP", and "IPcomp" is another question).


					- Bill