A large number of issues that were identified were related to the Architecture document, and Stephen Kent presented those issues in his presentation. Currently, there is a set of 12 documents. Document editors will make another last set of changes, ask for comments to the list, and we will be entering last call on the documents very shortly. MKMP is intended to provide scalable and secure distribution of multicast keys. Routers do not need join secure multicast group, and it is independent of underlying m-cast routing.
Key acquisition is separate from group join.
To create a secure group, group key manager creates key, list of candidate key distributors, and access control info. Only routers already on the distribution tree become GKDs. Next steps are to clean up and issue draft MKMP specification. MKMP may require a separately chartered WG, but won't be considered by IESG until current IPsec docs passed. Policy Management Policy means different things to different people.