The%20Internet%20IP%20Security%20PKI%20Profile%20of%20ISAKMP%20and%20PKIX

1
The Internet IP Security PKI Profile of ISAKMP
and PKIX

• draft-ietf-ipsec-pki-profile-03.txt
• Brian Korver ltbriank_at_xythos.comgt
• Eric Rescorla ltekr_at_rtfm.comgt

2
What isdraft-ietf-ipsec-pki-profile-03.txt?

• Provides a profile of ISAKMP and PKIX for use in
  IPsec
• Complements specifications such as IKEv1 (and IKE
  v2)
• strawman proposals

3
Examples of issues addressed in
draft-ietf-ipsec-pki-profile-03.txt

• When should an implementation send Certificates
  and/or CRLs?
• What response should be given to an empty
  CERTREQ?
• How must the ID payload be used for determining
  policy?
• In which fields should particular types of
  identity information appear in certificates?
• What formats should be used for out-of-band
  exchange of PKI-related information?

4
Whats new in -03?

• Not much
• Minor editorial changes to clean up language
• Minor additional clarifying text
• Removed hyphenation
• Added requirement that implementations support
  configuration data exchange having arbitrary line
  lengths

5
Going forward to -04

• Add/remove text in accordance with whatever the
  group determines its scope should be
• Incorporation of feedback (hint, hint)