[Ipsec] draft-ietf-ipsec-esp-ah-algorithms-02.txt

Hi Donald,

I have some minor comments: -

1. For ESP we state that "MUST    NULL"(must support NULL authentication). However 
http://www.ietf.org/internet-drafts/draft-ietf-ipsec-esp-v3-09.txt <http://www.ietf.org/internet-drafts/draft-ietf-ipsec-esp-v3-09.txt>  very clearly seems to state "However, this standard does not require ESP implementations to offer an encryption-only service."

We may want to change the MUST to SHOULD. Steve?

2. A more general comment, what about all the algorithm's that are specified by IETF but not in the document or a different key size, e.g. "SHOULD+    AES-CBC with 128-bit keys" what about other key sizes. I understand it is stated that: -
  "To ensure interoperability between disparate implementations it is necessary to
   specify a set of mandatory-to-implement algorithms to ensure at least one algorithm
   that all implementations will have available." however SHOULD's(I guess not mandatory) are specified.

Thanks,
Vishwas