Re: additional core draft nits in need of WG attention.

[Markus Friedl <markus%openbsd.org@localhost>]

On Mon, Nov 10, 2003 at 02:12:10AM -0500, Bill Sommerfeld wrote:
> immediately after this text:
> 
>    The ciphers in each direction MUST run independently of each other,
>    and implementations MUST allow independently choosing the algorithm
>    for each direction (if multiple algorithms are allowed by local
>    policy.
> 
> insert:
> 
>    Note that there is no security advantage to using different
>    algorithms in each direction; implementations SHOULD use the same
>    algorithm in both directions when allowed by policy.

In IPsec the algorithms are unidirectional.  Why
should it be a SHOULD for SSH?