Re: [dhcwg] IPsec for DHCPv6 client ?

Ted Lemon wrote:

>> Why is not proposed using IPsec to secure communications between 
>> clients and servers with the some restrictions, i.e. installation of 
>> static keys as shared secret, in intra-domain ?
>
>
> Because in general we don't expect that such a security association 
> would exist.   In general, you are plugging a device into the network, 
> and you want it to work - you don't want to have to configure it 
> before you plug it in.   If you wanted that, you wouldn't be using 
> DHCP, right?   The only plausible exception I can come up with is a 
> cell phone, where perhaps the provider would install an IPsec key in 
> the phone.   But even then, I'm skeptical that it could be made to 
> work the way you describe.
>
My point concerns the possibility of using IPsec in scenario where DHCP 
Authentication is proposed. Because DHCP Authentication relies on shared 
secret, I think the draft should have a section about this, even if it 
would be limited to client and relays or client and server on same link.

Jean-Mickael

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg