Re: Moving PIC forwards

[Jari Arkko <Jari.Arkko@xxxxxxxxxxxxxxx>]

>I'd like the protocol to run over TCP, so that we
>can handle large certificate payloads without fragmentation. 

A concern with PIC is the added RTTs, which
are a pain in cellular networks. Making the
protocol run over TCP would make things worse.
I suggest that we still keep the UDP bearer and
deal with the routers that may exist in between.

Besides, for the problem to occur you must have
a firewalling router between the businessman's
PC and the corporate PIC node /VPN gateway. How
likely is that? Network operators hopefully shouldn't
be filtering your traffic, so that leaves the
corporate network border routers possibly in front
of the PIC/VPN nodes. If they can't handle fragmented
UDP packets, the network manager can upgrade the
routers at the same time he installs PIC. Or?

Jari