Re: [IPsec] AD review of draft-ietf-ipsecme-qr-ikev2-08

[Paul Wouters <[e-mail]>]

On Wed, 6 Nov 2019, Valery Smyslov wrote:

> Do you think the current diagrams are confusing?

Yes. Because often I go back to RFCs and only look at the diagrams
expecting it to be what I need to implement. So for optional/required
payloads, I would mostly look at the diagram, and perhaps read a bit
of text.

>> That is, the diagrams should represent the state machine, not an
>> example of the state machine.
>
> Hmmmm... It's an open question :-) Aa a counter-example,
> the EAP and non-EAP case of IKEv2 are not shown
> on the same diagrams - these are different diagrams,
> however the state machine for IKE_AUTH is the same.

Sure.

> I think diagrams (at least in IKE) don't replace state machine
> description and are mostly used for clarity.

We even put the diagrams in some of our code comments. It's used
for more than just clarity by us :)

Paul