RE: key change for TCP-MD5

How often do you think keys should change?

Arguably, any time someone who had access to the key is no longer supposed to have such access.

I've never had anyone ask to change keys for about 50 session-years.

I guess the question the question is whether that's because they really never needed to, really didn't think about, or really didn't want to suffer the hassle and so just accepted the risk. DS