[dhcwg] Open Issues for Secure DHCPv6

[Lishan Li <[e-mail]>]

Dear all,

After the discussion with authors and Stephen Farrell, we have the
following problems not sure and want to get further comments from WG.

1. For the applicability part, after the discussion with Jinmei, we want to
made the following changes:
(1). Add some opportunistic security related description in applicability
part;
(2). Support the following two modes of operations: 1.
Authentication+Encryption with cert/public key validation; 2. (if #1 isn't
possible) Encryption-only without cert/public key validation.
   The current version only includes "Authentication+Encryption" mode. We
should add the "Encryption-only" mode.

2. According to Stephen's comment, in some scenario, such as hotspot or
home network, there is not need to verify the client's identity. If someone
is using DHCPv6 to allocate addresses to server boxen in a data centre,
then the client authentication is needed.
So in order to have the balance right there, client authentication is
optional.

3. The Reply message with an error status code, is not encrypted. So the
Reply message may contain the client identifier option, then the client's
privacy information may be disclosed.
So the solution is that: The Reply message can be encrypted to avoid
privacy information disclosure.

Could you please give us some comments and guidance? Thanks in advance.


Best Regards,
Lishan