Re: [tcpm] question about TCP-AO and rekeying

[Joe Touch <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Eric Rescorla wrote:
...
>> If that's where we put that logic, what happens when we don't have a
>> KMP? How do we know that both ends will do the same thing with a set of
>> manually entered keys?
> 
> It was my understanding that the consensus was that we were not 
> going to design a system that attempted to prevent user error.

Oh, absolutely, agreed.

This is the kind of error where two ends install the keys correctly, but
internally the two implementations resolve overlap in different ways, so
keying fails.

> Given that typographical errors in key entry seem far more likely
> than this kind of misconfiguration, if our intent is to prevent
> user error, then we should be attacking that first.

As above, this isn't a user error issue. This is a case where leaving
something to the implementer is what is causing the problem.

Joe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAko7sWoACgkQE5f5cImnZrvbdQCfUqogtjHdO21vZZcwgHqVn7Ej
YTgAnRKD1M2lEJKOu1EJtLmP22RbJgfA
=a5hQ
-----END PGP SIGNATURE-----