Re: is manual keying mandatory

[Bill Sommerfeld <[e-mail]>]

I feel strongly that manual keying should continue to be a MUST.

There are going to be some times when the full complexity of ISAKMP
won't be necessary; having manual keying universally available will
improve interoperability and configurability in those situations...

It also leaves makes more room for experimentation with new key
management techniques, since a new key management system can be
grafted on through the "manual" key management interface.

It's also useful in testing to ensure that the transforms, etc., are
in a position to really reject things like weak keys.

All in all, it makes for a more open, modular system.

						- Bill