[saag] IPsecME WG at IETF 85

[Paul Hoffman <[e-mail]>]

The ad hoc VPN problem statement and scenarios document has stalled, waiting for the authors to do a revision to meet comments from WG Last Call. Once that happens, we'll verify that the document covers all the outstanding comments and send it to the AD for IETF Last Call.

The WG's other main document, running IKE over TCP, has gotten some comments, particularly about NATs.

The ECDSA design team sent their report to the mailing list, and a draft will emerge soon.

There was a discussion of replacing the RSA raw public key with a new certificate type that handles other types of non-certificate key containers.

Dave McGrew presented his update to RFC 4835. The WG was interested in the topic and will likely adopt this as a new WG work item.

There were presentations on changes or profiles to IKEv2 to make it smaller and easier to implement.

We heard presentations on a couple of drafts that will most likely not appear in the WG on multi-path IPsec, MIF security requirements, and an operational issue with leakage over IPv6.

--Paul Hoffman