Re: draft-ietf-ips-fcip-slp-07.txt

[Randy Bush <randy@psg.com>]

>>>> "implemented?"  i think they need to say "used," and specify for what
>>>> and when.
>>> we have traditionally required implementation, on the principle that
>>> "anything that runs over IP will end up on the Internet", but not use,
>>> on  the theory that what people do in the privacy of their own back
>>> rooms is  none of our business, and they MAY be right that there exist
>>> times when  they are not needed.
>>
>> you don't get it.  these folk will not IMPLEMENT ipsec, their application
>> will or will not USE it.
> 
> sigh....
> 
> the way I use the words:
> the vendors will implement code that either contains or does not contain 
> hooks for invoking IPSEC functionality.
> I normally call that "implement".
> 
> the buyers of those products, given that the product has the knob, will 
> either turn the knob to "ipsec on" or "ipsec off". I normally call that 
> "use".
> 
> Cisco implements, Chase Manhattan uses.
> 
> If we start talking about "use" in the context of making product, I think 
> we confuse the hell out of everyone, including ourselves. Not good for 
> security.

this could all be made clear in the document.  it isn't.

randy