Re: [Autoconf] Call for comments to a new AUTOCONF charter proposal.

[Henning Rogge <[e-mail]>]

Am Mittwoch 30 Juni 2010, 13:40:49 schrieb Dearlove, Christopher (UK):
> From RFC 3971
> 
>    To protect Router Discovery, SEND requires that routers be authorized
>    to act as routers.  This authorization is provisioned in both routers
>    and hosts.  Routers are given certificates from a trust anchor, and
>    the hosts are configured with the trust anchor(s) to authorize
>    routers.
> 
> That's both significant pre-configuration, and problematic in an ad hoc
> network. (The rest of section 6 has a whole lot more complexity.)

Address configuration security will need at least some kind of certificate 
system.
Hmm, maybe a selfsigned certificate would work (nodes generate an identity for 
themselves, then get their address bound to this identity)...

I agree we should not forget security aspects, they are very difficult to add 
on this protocol layer (similar to security for routing protocols).

Henning Rogge

-- 
1) You can't win.
2) You can't break even.
3) You can't leave the game.
— The Laws of Thermodynamics, summarized