Re: [Tsvwg] Adopting draft-behringer-tsvwg-rsvp-security-groupkeying as WG item?

[RJ Atkinson <[e-mail]>]

On  28 Jan 2008, at 07:31, Hannes Tschofenig wrote:
> How many other alternatives have you considered?

I am not aware of any alternatives that would enable
scalable automated key management for RSVP.  At present,
there are zero standardised mechanisms for that purpose.

> Btw, since a IKE DOI builds on IKE there might well be a PKI  
> underneath.

ISAKMP/IKE do not require a PKI.  In fact, many deployments
of ISAKMP/IKE with IPsec today do not use any sort of PKI.
(I use one quite regularly myself.)

So nothing on the table here would require a PKI or prohibit
use of a PKI.  In short, PKIs are not germane to the thread
at hand in any way obvious to me.

Yours,

Ran
[e-mail]