<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body dir="ltr" bgcolor="#ffffff" text="#000000">
<p style="margin-bottom: 0cm; margin-top: 0pt;">Mostly nits, some
bigger comments.</p>
<ul>
<li>If the use of Raw RSA is "clarified", shouldn't this draft
"update" RFC 4306 (or worse, RFC 4718)?<br>
</li>
<li>Sec. 2: "It <b>SHOULD be sent in after </b>the phase 1 SA has
become private," - I guess you mean "SHOULD be sent <b>only</b> after.<br>
</li>
<li>Typo: "Aggressive mode <b>is </b>SHOULD NOT".</li>
<li>Sec. 3: "This code point is hereby defined for IKEv1" - this
should also go into the IANA Considerations.</li>
<li>KEY is capitalized a number of times.</li>
<li>Sec. 5: "It details the order in which to look for authentication
data for a protocol which does not in itself require any authentication
data." This sentence baffled me. What do you mean? Does this imply that
no further security analysis is required?<br>
</li>
</ul>
<p style="margin-bottom: 0cm; margin-top: 0pt;">Thanks,</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"> Yaron</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
</body>
</html>