Re: [Hipsec] feedback of hiccups-01 draft

[Jan Melen <[e-mail]>]

Miika Komu wrote:
>
> * I guess the draft assumes that data packets may be sent over 
> HIP-aware overlays. I would suggest that the authors have a look at 
> draft-heer-hip-middle-auth and perhaps add a pointer to the draft. 
> Particularly, I would propose to make the public key mandatory and 
> perhaps the middlebox extension as SHOULD? There is a new version of 
> the draft coming up very soon. Feel free to ask Tobias for a preview 
> if you are interested.

I think that the host on the path should not verify the signatures on 
HIP_DATA packets as it is meant that these are anyway only few packets 
that are exchanged between the peer's and not a stream of data. For 
streams you set-up a full HIP association using base-exchange and ESP as 
a transport.

   Jan