Subject: [Hipsec] DH Group selection

From: [email-masked] (Ahrenholz, Jeffrey M)
Date: Thu Dec 4 12:19:00 2003

> > My feeling is that negotiation would make things a bit more
> > complicated,
> 
> I agree.
> 

My vote is that we leave the I1 alone. It seems that the existing implementations support all (most?) of the DH groups. As far as what MUST be supported, I think that two group idea might suffice, or just require support of all the groups. As Petri said, since the Responder is "king", the Initiator could just be stuck with whatever the Responder decides inside the R1.

-Jeff