Re: [tcpm] question about TCP-AO and rekeying

[Joe Touch <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Eddy, Wesley M. (GRC-MS00)[Verizon] wrote:
> Since this thread has turned into ping-pong between Joe and
> Eric, I'll break that pattern by putting in my assessment as
> a WG participant ...
> 
> I think Eric's explanation that if multiple MKTs can be
> matched to the outgoing SYN, then we can pick from them in
> an implementation-dependent way, as long as we pick one key,
> makes sense.  Yes, we can add complexity to disambiguate
> how that selection is made as part of our spec (TSAD/TAPD),
> but after reading the thread, I don't see clear value in that.

That's fine - as per my other post that's in my outbox queue.

Joe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAko/9QcACgkQE5f5cImnZrur/QCeM9mbq4r+sgepKPjhs+Oy/2b2
Io0An0QLkR7WenY3SIiiwz2w89iCo5zQ
=LVEX
-----END PGP SIGNATURE-----