Subject: [IPsec] Issue #149: Use of "SA" and "SA pair"

From: Paul Hoffman <[email-masked]>
Date: Wed, 20 Jan 2010 13:02:28 -0800

2.8: "The responder can be assured that the initiator is prepared to receive messages on an SA if either (1) it has received a cryptographically valid message on the new SA." this should really be "...on the new SA's dual SA" (or better wording thereof) since there's a pair of SAs, and we are determining the state of one based on the other. In general I think we are using the terms SA and SA Pair interchangeably, which is rather confusing.

--Paul Hoffman, Director
--VPN Consortium