Hi,

The present draft-mglt-ipsecme-dscp-np [1]'s status has been changed to
"Experimental". It outlines the process by which a pair of SA can be
allocated identical DSCP values. We recognize that this is not always
essential; however, there are instances where such agreement is required
(for example, Diet-ESP [2]) or where it offers certain advantages.
Consequently, we believe it deserves a distinct mechanism, and if
individuals do not strongly oppose this, we would appreciate the
opportunity to have it published.

[1] https://datatracker.ietf.org/doc/draft-mglt-ipsecme-dscp-np/
[2] https://datatracker.ietf.org/doc/draft-ietf-ipsecme-diet-esp/

Yours,
Daniel

---------- Forwarded message ---------
From: Tero Kivinen <[email protected]>
Date: Thu, Mar 19, 2026 at 9:30 PM
Subject: [saag] IPsecME status update for IETF #125
To: <[email protected]>


This has also been stored in the datatracker as status update for the
IPsecME WG (https://datatracker.ietf.org/group/ipsecme/about/status/).

----------------------------------------------------------------------
Published RFCs: Renaming ESN (RFC 9827), Group Key Management using
IKEv2 (RFC 9838), and Mixed PSKs (RFC 9867).

ESP Header Compression Profile and Diet ESP are waiting dcsp-np draft,
and we decided to publish that document as experimental, so we are
waiting for that draft to be submitted with those changes before they
are ready for publication.

The IPSECME Working Group met at IETF 125 to discuss the status of
active drafts and several new proposals, primarily focusing on
post-quantum cryptography (PQC) integration, large message handling,
and protocol optimizations. Significant discussion occurred regarding
the alignment of PQC drafts, the efficiency of IKEv2 fragmentation for
large payloads, and the introduction of KEM-based authentication.

PQC Auth and IKEv2 MLKEM drafts should be ready for publication.
Downgrade prevention is also almost ready.

FrodoKEM draft either requires CFRG to adopt their draft, or the
references needs to be changed to some other source.

A Larger Internet Key Exchange version 2 (IKEv2) Payload
draft-nir-ipsecme-big-payload should be ready for WG adoption call.
-- 
[email protected]

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]


-- 
Daniel Migault
Ericsson
_______________________________________________
IPsec mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to