MIME-Version: 1.0
References: 
 <CAG2Zi22kbWBDq1CejN93a89OO2-VgZJ7P7bvzW_xayoDPT_dWw@mail.gmail.com>
 <D835D903-C901-472B-B56E-FAA2DD6B898C@ll.mit.edu>
In-Reply-To: <D835D903-C901-472B-B56E-FAA2DD6B898C@ll.mit.edu>
From: Christopher Patton <cpatton@cloudflare.com>
Date: Thu, 31 Jul 2025 09:07:57 -0400
Message-ID: 
 <CAG2Zi20be_=xAJcsZ=LtfFGui_J+p-_ea300BgjsftS-J20Q=w@mail.gmail.com>
To: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
Content-Type: multipart/alternative; boundary="0000000000002d536d063b3955b2"
Message-ID-Hash: WWXAVNCDXRPVW3U66LKMRCEVR2AHAG4O
CC: Jun Hu <jun.hu@nokia.com>, Michael Richardson <mcr+ietf@sandelman.ca>,
 Valery Smyslov <smyslov.ietf@gmail.com>, Scott Fluhrer <sfluhrer@cisco.com>,
 ipsec <ipsec@ietf.org>
Precedence: list
Subject: =?utf-8?q?=5BIPsec=5D_Re=3A_=5BEXT=5D_Re=3A_draft-smyslov-ipsecme-ikev2-down?=
	=?utf-8?q?grade-prevention?=
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/ipsec/7SJIUgJuOvGcKimdEkJaD-qDWu0>

--0000000000002d536d063b3955b2
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Uri and Jun,

I agree - mandating use of PPK may not work. However, suggesting use of
> PPK, i.e., as a (negotiable?) option would be a very good thing: those wh=
o
> have the ability to employ it, and want better security - would opt in.
> While those who don=E2=80=99t care or for various reasons cannot manage t=
he
> distribution - could opt out.
>

This sounds like a good idea to me!
https://github.com/smyslov/ikev2-downgrade-prevention/issues/5

Chris P.

--0000000000002d536d063b3955b2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi Uri and Jun,</div><div><br></div><div></div><div c=
lass=3D"gmail_quote gmail_quote_container"><blockquote class=3D"gmail_quote=
" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);=
padding-left:1ex"><div dir=3D"auto">I agree - mandating use of PPK may not =
work. However, suggesting use of PPK, i.e., as a (negotiable?) option would=
 be a very good thing: those who have the ability to employ it, and want be=
tter security - would opt in. While those who don=E2=80=99t care or for var=
ious reasons cannot manage the distribution - could opt out.=C2=A0</div></b=
lockquote><div><br></div><div>This sounds like a good idea to me! <a href=
=3D"https://github.com/smyslov/ikev2-downgrade-prevention/issues/5">https:/=
/github.com/smyslov/ikev2-downgrade-prevention/issues/5</a></div><div><br><=
/div><div>Chris P.</div></div></div>

--0000000000002d536d063b3955b2--