Re: linux-ipsec: Phase II PFS

> > I hope that stuff will go away in the medium term. Pluto (or
> > something) needs to support much more control and flexibility in the
> > policy area.
>
> I hope instead that we will support very little control and

If we are going to implement the full IPSEC spec, we don't have much choice on this, as it comes with a lot of knobs, buttons, and switches. Mind you, it would make sense to have most of those under a locked cover marked "experts only".

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)