[CGA-EXT] Comments on draft-ietf-csi-proxy-send-03

[Tony Cheneau <[e-mail]>]

Hello,

I read your draft and some comments.

I will start with the "editorial" ones:
- I often read "PSO option", which expends to "Proxy Signature Option
   option". IMHO, "PS option" would be better.
- Section 6.2: "acccording to" => "according to"
- Section 7.2: "these node interpret" => "these nodeS interpret"


One technical comment/question:
- Section 6.2
"  When a MAG replies to a RS with a RA, the source address MUST be
    equal to the MAG link-local address associated to the MN in this
    PMIPv6 domain and its own link layer address as Source link-layer
    address.  Then a timestamp (generated by the proxy) and nonce (if
    appropriate, acccording to [RFC3971]), MUST be included.  Finally, a
    PSO option signing the message MUST be included as the last option of
    the message.  This procedure is followed for any other ND message
    that could be generated by the MAG to a MN. "
I understand from PMIP that the node that moves through the domain sees
only one Link-Local address for all the MAGs. From your SNDP proposal,
the node relies on the RFC 3971 rules to process the timestamp. I mean,
the node could implement the mechanism proposed as a SHOULD in Section
5.3.4.2 of RFC 3971. Here, my concern is that the node will most likely
consider the NDP messages of all the other MAG (after the first one it
met) as replayed packets.

A small example, two MAGs, MAG_A and MAG_B. MAG_B's clock has minus one
minute difference with MAG_A.  MAG_A sends a RA message secured with a
PSO. The nodes verifies it and record a RDlast and TSlast value (as per
RFC 3971). The node moves and MAG_B sends a RA message.  The node read
the Timestamp option and compares it with its RDlast and TSlast value.
The message is rejected as it looks like a replayed message.

Or maybe I missed the part that says the clocks are implicitly
synchronised (or something else) ? Either way, could you clarify the
situation for me and maybe add some text in the draft about this ?

Apart from the minor points I noted, the overall document is in a very good
shape.

(Also, sorry for my late reply to this WGLC)

Hope it helps.

Regards,
 	Tony