[strongSwan] seeking advice: pfs on creating a child_sa?

Harald Dunkel harald.dunkel at aixigo.de
Tue Mar 1 11:23:28 CET 2016

Hi folks,

looking for some advice: Would you suggest to use pfs for esp?
Apparently pfs is a must-have to establish an ike_sa today, but
is this reasonable for the child_sas as well?

Every helpful comment is highly appreciated

More information about the Users mailing list