[Hipsec-rg] next steps with draft-heer-hip-middle-auth-00

[julien.IETF at laposte.net (Julien Laganier)]

On Thursday 24 January 2008, Miika Komu wrote:
> Hi Julien,
>
> may I ask why? If what we want is to public key-based filtering for
> HIP control packets? I think the draft specifies such behaviour and
> avoids replay attacks on HIP control packets as well. (HIT-only-based
> filtering does not tell us whether the HIT is owned by the end-host)

For my own curiosity, what would be the security service provided by HIP 
control packet filtering?

If this is really what you want to do, write it down in the draft. This 
is for sure different that admission/access control, accounting, etc.

--julien