Re: draft-ietf-msdp-spec

["Steven M. Bellovin" <smb@research.att.com>]

In message <E196084-000Ppi-D1@ran.psg.com>, Randy Bush writes:
>> I got the context, but you do need to say what has been done and include 
>> the reference.  MD5 (or TCP-MD5 as you think the authors meant to say) is 
>> not really used, rip it out.
>
>it is the only transport protection which is actually used.  ipsec
>is not, to my knowledge.
>
>randy
>
Do you mean RFC 2385?  The same option I'm writing an RFC deprecating, 
because this doesn't seem to conform to the environment we're declaring 
appropriate for it?  


		--Steve Bellovin, http://www.research.att.com/~smb (me)
		http://www.wilyhacker.com (2nd edition of "Firewalls" book)