[anonsec] details of IKE/IPsec channel binding

[Michael Richardson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


>>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at sun.com> writes:
    Nicolas> This needs to work for IKEv1.  Assuming that the IKE_SA is
    Nicolas> still around is not a good assumption.

  I have no problem with requiring that the IKE_SA remain around.  
  Seriously.  

- -- 
]            Bear: "Me, I'm just the shape of a bear."          |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Finger me for keys

iQEVAwUBRhAnvYCLcPvd0N1lAQL2iwf+JFvMfMeIDeR2fcWlJ2q/BWT3KwSYV8GP
5z5dVReO6Rd2UWC+JAOqixQCk3wHD3/3d/4M+CMkwT9ns8ZLEz3um5/DPYKM1fYc
BkI/73lVUx/njlez72LlGIUEFCfaWqw5orEYm43KaWlx1dmJvwCOMJkK8Ap4OV4W
M415IJ2n7gt6VvvnNSK2uqrhJl2iVWh9uFsUKVZpzb9fmPbhDl9pDhyNNq96Torl
auTWxBtoFE1qV0aroA9I/5d2LRiDG/Db2nrxVGCBMAljhnOlTTQVYCErIa97JYOb
+my+++vFg0euDWfWEFlD5Kq8hxHimZgjLH4XH+1JFinIMLqM4+Wd8g==
=B030
-----END PGP SIGNATURE-----