[Hipsec] Using IPSECKEY RR

From: Pekka Nikander <pekka.nikander(at)nomadiclab.com>
Date: Wed Mar 19 2003 - 17:46:00 EST

I had a lunch today with Michael Richardson, and we talked about HIP using IPSECKEY RR for storing HIs.

http://www.sandelman.ca/SSW/ietf/ipsec/key/draft-richardson-ipsec-rr-03.txt

The outcome was that in the long run we should get a separate RR for HIs. However, in the short run we can certainly use IPSECKEY RRs in the forward map, and just leave the gateway field empty. More specifically, have a zero in the gateway field denoting the root domain.

The HI format would still be the RFC2536 format, just as it is currently specified. In draft-jokela we need to go back to the -01 version with the algorithm field.

If there aren't any objections, I'll specify this in a later version of the protocol draft.

--Pekka Nikander

---

Hipsec mailing list
Hipsec@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/hipsec Received on Wed Mar 19 18:17:03 2003