Re: Disposition of the IKEv2 ID_KEY_ID type

[Paul Hoffman / VPNC <paul.hoffman@xxxxxxxx>]

At 2:12 PM -0400 4/6/04, Theodore Ts'o wrote:
> It seems one
> simple way of addressing this situation is to simply to revert to the
> IKEv1 wording, which would simply involve deleting the phrase "to pass
> an account name or" from the specification.

Yes. Code re-use from IKEv1 is good.

> If we were to do this, which would make the use of ID_KEY_ID
> unambiguous, it raises the next question: should we create a new
> identity type that contains an account name, with some kind of tight
> specification about the use of UTF-8 or whatever.

No. There has been no demand for it. If there is such demand, someone 
can later register a new ID type. We can then also test the new 
versioning mechanism. :-)

--Paul Hoffman, Director
--VPN Consortium