The document mischaracterizes draft-ietf-ipsec-sctp-02.txt -- it doesn't just discuss the issues, it defines the appropriate extensions to IKE to deal with the issue. --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com (2nd edition of "Firewalls" book)