Re: [tcpm] status of TCP-MD5 after TCP-AO publication

[Lars Eggert <[e-mail]>]

Hi,

On 2009-7-29, at 13:02, Iljitsch van Beijnum wrote:
>> at the meeting, the question came up which status TCP-MD5 should
>> have after TCP-AO is published. Specifically, whether it should be
>> obsoleted by TCP-AO and/or if it should be reclassified as Historic.
>
> First of all, I'd like to see some operational experience with TCP-AO.
> Don't throw away your old shoes until you know whether the new ones  
> fit.

so are you saying we should *neither* obsolete TCP-MD5 *nor* move it  
to Historic?

> Second, it's not like TCP-MD5 isn't being used. As such, "historic"
> wouldn't apply. "Deprecated", maybe.

There is no way to express this for an RFC. There are two options: "A  
obsoletes B", which is indicated in the document header, and "A is  
reclassified as Historic" in the RFC Editor database.

> Third, why is it exactly that we can't simply move from MD5 to IPsec
> to protect BGP sessions??

I refer you to the extensive discussion that happened when draft- 
bonica was first presented to the WG, which I have no interest in  
rehashing.

Lars