RE: ICIM: comment on IPsecPolicyGroup

[Jay Wack <jayw@xxxxxxxxxx>]

ANSI has a very broad approach X9.69 called Key Management Extensions...you
may want to take a look.

Jay Wack: CTO Tecsec  703 506 9069 x112

-----Original Message-----
From: Ricky Charlet [mailto:rcharlet@xxxxxxxxxxxx]
Sent: Tuesday, January 09, 2001 7:38 PM
To: .ipsec-policy
Subject: ICIM: comment on IPsecPolicyGroup


Howdy,

	IPsecPolciyGroup binds together an IKERule and and IPsecRule. I'd
like
to see a layer of abstraction introduced, namely a KeyManagementRule.
Then under keyManagementRule, we could use IKE for KM services if we
wanted, but we could also use kerberose, or son-of-ike or manually
entered keys, or....

-- 
  Ricky Charlet   : Redcreek Communications   : usa (510) 795-6903