[IPsec] IPsecME virtual interim meeting (revised date)

Yaron Sheffer <yaronf.ietf@gmail.com> Tue, 30 April 2013 13:50 UTC

Return-Path: <yaronf.ietf@gmail.com>
X-Original-To: ipsec@ietfa.amsl.com
Delivered-To: ipsec@ietfa.amsl.com
Received: from localhost (localhost []) by ietfa.amsl.com (Postfix) with ESMTP id 33E8E21F9AD4; Tue, 30 Apr 2013 06:50:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([]) by localhost (ietfa.amsl.com []) (amavisd-new, port 10024) with ESMTP id 8Do0ib1wQq+f; Tue, 30 Apr 2013 06:50:38 -0700 (PDT)
Received: from mail-bk0-x22d.google.com (mail-bk0-x22d.google.com [IPv6:2a00:1450:4008:c01::22d]) by ietfa.amsl.com (Postfix) with ESMTP id C74CD21F9AD3; Tue, 30 Apr 2013 06:50:37 -0700 (PDT)
Received: by mail-bk0-f45.google.com with SMTP id j4so244542bkw.18 for <multiple recipients>; Tue, 30 Apr 2013 06:50:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=mMqlSLbMtx9opOgrekgmMKSXMRbwhpf0QnLq3APSFb0=; b=Om+WMF2qYuvX6skoVF7KdP1FtRMvO8oLEHwcBmUYJH3gt4YOWhSgS0DsaxqppOiG5r npq3JvQAUfQuchhccBlyRFMEkYNtUyW0GskSUX9cAin276Tr95+RkiI6DZKTxPwvwhyY ueJK32VI8T9tiThatLYRl8m2RsH2RSKAo7/uqJA9CWWIePfWq/sv6oi3lN1/kLG71FHR thCGZYFTSnod955RVG0A/uWJeQdusHZnl9G58c+gTtjIHS1/8oOtOZZHmhHhcENbH014 1MyS126zs+EjF5Qo39N77vRrJ1nK+Rx3TLbT7HbkJCYJxxuaVzMAwEZWh5xXH3QBLP5Y u2BQ==
X-Received: by with SMTP id qq10mr22494116bkb.133.1367329836858; Tue, 30 Apr 2013 06:50:36 -0700 (PDT)
Received: from [] (bzq-79-182-143-212.red.bezeqint.net. []) by mx.google.com with ESMTPSA id cv9sm8158238bkb.5.2013. for <multiple recipients> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 30 Apr 2013 06:50:35 -0700 (PDT)
Message-ID: <517FCC2A.8060904@gmail.com>
Date: Tue, 30 Apr 2013 16:50:34 +0300
From: Yaron Sheffer <yaronf.ietf@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130329 Thunderbird/17.0.5
MIME-Version: 1.0
To: IPsecme WG <ipsec@ietf.org>, iesg-secretary@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 7bit
Subject: [IPsec] IPsecME virtual interim meeting (revised date)
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Apr 2013 13:50:39 -0000

Dear IPsec folks,

The ipsecme working group is chartered to come up with a solution for 
transporting long IKEv2 messages over networks that do not perform IP 
fragmentation correctly, and as a result drop overly long messages, 
usually IKE_AUTH messages.

Our original plan was to base the solution on IKE-over-TCP, however the 
author of this draft announced that he now prefers a different solution, 
similar to the (non-standard) IKEv1 Fragmentation payload that was 
implemented by several vendors (see 
http://msdn.microsoft.com/en-us/library/cc233251.aspx). We do not want 
to end up with a common but non-standard solution in IKEv2, which would 
practically guarantee interoperability issues.

As a further data point, we are aware of IPR issues with Microsoft's 
solution; we have tried to clarify the issue with Microsoft but have not 
been successful yet.

We would like to invite the group to a Virtual Interim Meeting (a.k.a. 
conference call), to discuss this problem.

Potential outcomes of the meeting include:
- The group decides that this is not an important problem.
- This is an important problem and we have 1-2 people committed to 
author a draft along the lines of the non-standard IKEv1 mechanism.
- This is an important problem and the group is happy to adopt 
draft-smyslov-ipsecme-ikev2-fragmentation (which solves the same problem 
in a somewhat different fashion).
- The group still prefers IKE-over-TCP and there are committed authors 
to continue work on that draft.

We propose to meet Thursday, May 16, at 9:00am PST (16:00 UTC, 12:00 
noon EST, 19:00 Israel) for 1 hour. We will publish a bridge number a 
week before the meeting.

Please let us know if the date/time absolutely doesn't work for you.

We welcome and invite discussion of these issues on the mailing list 
before the meeting.

     Paul and Yaron