Re: draft-ietf-msdp-spec

[Alex Zinin <zinin@psg.com>]

Russ,

> Alex:

> I got the context, but you do need to say what has been done and include 
> the reference.

Sure, we'll have a ref.

> MD5 (or TCP-MD5 as you think the authors meant to say) is 
> not really used, rip it out.

I didn't get what you mean here before I read Randy's reply to this.
You probably mean that keyed MD5 is widely know as a weak construction
and HMAC should be used instead. The reality is TCP-MD5 is used in
BGP, and MSDP followed its example.

The reason I thought about "SHOULD" is that we probably don't want to
encourage no security story at all, but at the same time, I don't
remember any major implementations actually providing any
authentication for MSDP.

Alex