Re: is manual keying mandatory

[EKR <[e-mail]>]

Bronislav Kavsan <[e-mail]> writes:
> Here are the reasons:
> - there is no "standard" key distribution mechanism for symmetric keys (I guess I
> can get on the phone with another guy and negotiate key values)
> - there is no "standard" mechanism for negotiation key lifetimes (should I also
> use the phone?)
> - how to re-key? - (get on the phone again?)
> - what is the encapsulation context - tunnel/transport? (my phone bill is getting
> higher?)
> etc, etc, etc.
These are operational reasons why it's inconvenient for USERS to do
manual keying. They don't have anything to do with why implementers
can't do manual keying, which is the question at hand.

What, precisely, is so incredibly difficult about adding this to
one's implementation that people are willing to make a big deal over
this, instead of just letting the settled issue stay settled?

-Ekr

-- 
[Eric Rescorla                             Terisa Systems, Inc.]
		"Put it in the top slot."