Re: [Dtls-iot] FW: New Version Notification for draft-keoh-dice-multicast-security-08.txt

["Kumar, Sandeep" <[e-mail]>]

From: Michael StJohns [mailto:[e-mail]]

The more geographic (or topologic) area covered by the multicast group, the easier the hack is and the harder the protections are.

I keep getting whipshawed by the arguments in this case - first its "no this will only be used in a secure building on a private network" and then its "no, this can be used in wide area multicast".  I don't think either of these are reliable design criteria and I wouldn't consider either to be enforceable in the build out of an IOT mesh.  That suggests that we have to design for the worst case of the wild wild internet and not the peaceful backwater of someone's home.

Mike



[SK] This is exactly why I presented the scenario very clearly at IETF London. The scenario was a single corridor with wireless lights and wired presence sensors which speak IP. Just because multiple PHY/MAC are used does not make it a large geographic or topological area.
Sandeep

________________________________
The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.