Comments from Tero Kivinen (cont.) 4. 5.1.1 TCP MD5 TCP MD5 does not protect against so security attacks described in the document. Need more proper description for TCP MD5. 4.5.1.2 IPsec Use of AH should be dropped. AH does not work for NAT traversal. Should mention IKEv2 instead of IKEv1 4.5.1.3 Secure BGP Typo |