Re: Moving PIC forwards

[Bernard Aboba <aboba@xxxxxxxxxxxxx>]

> (c) something else
> 
> If you choose choice (c), 
> please say what it is you want.
> 

I'd like the protocol to run over TCP, so that we can handle large
certificate payloads without fragmentation. In practice, fragmentation of
IKE cert payloads has turned out to be a headache, because many
existing router code loads cannot handle fragment filtering very well. 

It would be much easier if PIC could just be installed in a network
without having to upgrade the routers.