Re: draft-ietf-ipsp-ipsec-apireq-00 comments

[Michael Richardson <mcr@xxxxxxxxxxxxxxxxxxxxxx>]

>>>>> "Joel" == Joel N Weber <ietf-ipsp@xxxxxxxxxxxxx> writes:
    Joel> session_id); this implies that there may be value to having an IPsec
    Joel> API provide a mechanism by which an application can supply key
    Joel> material.  Under ``Non-Goals and Bad Ideas'', it's unclear whether
    Joel> the 
    Joel> ``Exposure of Keys'' section is trying to prohibit applications
    Joel> contributing key material in this fashion, or not.

  PF_KEY already permits an application to do that.
  That's why it is a non-goal. The problem is already solved.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@xxxxxxxxxxxxxxxxxxxxxx http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [