Re: [Hipsec] feedback of hiccups-01 draft

[Miika Komu <[e-mail]>]

Jan Melen wrote:

Hi,

> Miika Komu wrote:
>>
>> * I guess the draft assumes that data packets may be sent over 
>> HIP-aware overlays. I would suggest that the authors have a look at 
>> draft-heer-hip-middle-auth and perhaps add a pointer to the draft. 
>> Particularly, I would propose to make the public key mandatory and 
>> perhaps the middlebox extension as SHOULD? There is a new version of 
>> the draft coming up very soon. Feel free to ask Tobias for a preview 
>> if you are interested.
> 
> I think that the host on the path should not verify the signatures on 
> HIP_DATA packets as it is meant that these are anyway only few packets 
> that are exchanged between the peer's and not a stream of data. For 
> streams you set-up a full HIP association using base-exchange and ESP as 
> a transport.

no, I meant that the middleboxes should apply nonces to the messages.