[anonsec] Connection latching by default?

[Nicolas Williams]

Solaris creates connection latches for all connected sockets by default,
whether the application requested it or not.

The just-submitted draft-ietf-btns-connection-latching-05.txt says:

                        Implementations MAY create IPsec channels
   automatically by default when the application does not request an
   IPsec channel.

But I see no reason not to make that a SHOULD.  Dan thinks it should be
a SHOULD.

Others, however, may disagree.

Comments?

Nico
--