[radext] Short draft on using larger packets for TLS fragmentation

[Sam Hartman <[e-mail]>]

There seems to be consensus on the idea that TCP level fragmentation is
the right way to fragment TLS when you can afford to change the proxies.
In fact, we may even have consensus that since RADSEC is experimental
that it's reasonable to assume that people who need fragmentation and
RADSEC can upgrade their proxies.

I'm tempted to write a short draft that revises RADSEC, permits larger
RADIUS messages and introduces a mechanism for saying that  you cannot
respond to a request without being able to send a larger fragment.

This does not provide negotiation nor does it provide support for the
proxy unmodified case.  However at least as I've been reading the WG
discussion, we all seem to agree this is the best approach when it is
possible.  Also, such a draft would not preclude using a future
negotiation mechanism and could work well along-side Alex's draft.

I'd kind of like to get to noises of support soon if I'm going to put
this together.  I understand the 00 deadline has been removed but I'd
rather publish sooner than later.

If this is published I'd like this to be consider as part of the
fragmentation discussion.  It's been brought up a number of times.