Re: Moving PIC forwards

[Jan Vilhuber <vilhuber@xxxxxxxxx>]

Of course that opens up TCP RST attacks and such... But I agree with the
fragmentation issues...

jan


On Tue, 30 Oct 2001, Bernard Aboba wrote:

> 
> > (c) something else
> > 
> > If you choose choice (c), 
> > please say what it is you want.
> > 
> 
> I'd like the protocol to run over TCP, so that we can handle large
> certificate payloads without fragmentation. In practice, fragmentation of
> IKE cert payloads has turned out to be a headache, because many
> existing router code loads cannot handle fragment filtering very well. 
> 
> It would be much easier if PIC could just be installed in a network
> without having to upgrade the routers. 
> 

 --
Jan Vilhuber                                            vilhuber@xxxxxxxxx
Cisco Systems, San Jose                                     (408) 527-0847