draft-ietf-ipsecme-ikev2-downgrade-prevention

Downgrade Prevention for the Internet Key Exchange Protocol Version 2 (IKEv2)

streamIETF groupipsecme stateactive intendedProposed Standard pages12 rev04 expires2026-10-31 canonicalhttps://datatracker.ietf.org/doc/draft-ietf-ipsecme-ikev2-downgrade-prevention/

This document describes an extension to the Internet Key Exchange protocol version 2 (IKEv2) that prevents particular downgrade attacks on this protocol by having the peers confirm they have participated in the same conversation. This document updates RFC 7296.