Subject: [Hipsec] NOTIFY in response to I1

From: [email-masked] (Jonathan Wood)
Date: Thu Apr 22 14:48:03 2004

There are a few situations where a NOTIFY might be
sent in response to an I1 (i.e. BLOCKED_BY_POLICY,
INVALID_MAJOR_VERSION, CHECKSUM_FAILED).

At this stage, the initiator probably won't have the
responders public key, just its HIT. So the initiator
will not be able to verify the signature in the NOTIFY.

To handle this, do we need a HOST_ID in the NOTIFY
as well?