Re: linux-ipsec: KRAP is at it in the IETF

> It has come to my attention that the KRAP (key recovery alliance program)

>...

On thinking about this, I wonder whether draft-rfced-exp-markham-00.txt might actually be a good thing (noting that it is marked Experimental and hence is not a standards-track document). I think I'd favor its publication, perhaps with an IESG disclaimer (as provided for in the Standards Process procedures for Experimental documents).

Why? Because it lets us *tell* whether a peer we're negotiating with is doing key recovery. Having a documented, halfway-standard way of doing this is valuable. If nothing else, we can refuse to talk to them. It's better than not knowing. (Refusing to acknowledge their existence will not make them go away.)

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)