Subject: [IPsec] Issue #141: Silently deleting the Child SA after a CHILD_SA_NOT_FOUND

From: Paul Hoffman <[email-masked]>
Date: Mon, 18 Jan 2010 18:27:34 -0800

Section 2.25: "A peer that receives a CHILD_SA_NOT_FOUND
 notification SHOULD silently delete the Child SA": Is this really
 necessary? I think this notification should only occur in cases where
 DELETE payload for this Child SA pair has already been sent, and
 probably has been processed already by the time the CHILD_SA_NOT_FOUND
 notification is received.

--Paul Hoffman, Director
--VPN Consortium