Re: [Tsvwg] Adopting draft-behringer-tsvwg-rsvp-security-groupkeying as WG item?

[Melinda Shore <[e-mail]>]

On 1/28/08 7:31 AM, "Hannes Tschofenig" <[e-mail]> wrote:
> How many other alternatives have you considered?

There weren't a lot of reasonable alternatives available.  For
us, a primary attraction is that group keys provide an
implicit authorization, which might not be as fine-grained
as we might like in an ideal world but goes beyond what's
available with other tools while doing it simply (no manual
keying, no Kerberos).  This is particularly useful for
keying a protocol which can carry multiple application-
types or to multiple communities inside the same administrative
domain.

> Btw, since a IKE DOI builds on IKE there might well be a PKI underneath.

Sure, but it's not the 'I' we're trying to avoid.

At any rate, I think it would be good if someone from TSVWG and
someone from MSEC sat down and hashed out how they'd like the
work to go forward, then brought the proposal to both groups.
It feels like this has been stalled out for awhile.

Melinda