Re: [babel] What's up with HNCP security?

[Juliusz Chroboczek <[e-mail]>]

>>>> Network wide keys are useless.

>>> Depends on the size of the network, I guess.

>> Yes.   For networks with only two hosts, network-wide keys are adequate...

> My _home_ network has plenty of network-wide shared keys (e.g. SSID
> PSKs) and I do not consider them useless; while they are low barrier to
> entry, I am not aware of any good alternatives that most of my devices
> would support 

Yes, I too am somewhat puzzled by Ted's very strong stance about avoding
shared keys, and cannot but wonder if it reflects WG consensus.  However,
it is my (perhaps mistaken) understanding that Stenberg-Schinazi security
gives us asymmetric keying basically for free, as far as additions to the
Babel protocol are concerned, so I suggest waiting for Ted's prototype
before deciding whether the added complexity is acceptable.

> (and SSID per device is not realistic).

Now don't you tempt me.

(Increase the beaconing interval, hack the wifi firmware to store more
keys, use a master SSID with a cool protocol to securely negotiate keys
with individual devices... and watch bitterly as nobody adopts your
protocol.)

-- Juliusz