RE: [Hipsec] a state machine proposal for mm-03

Miika Komu <miika@iki.fi> Tue, 11 April 2006 16:38 UTC

Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1FTLtE-000265-WD; Tue, 11 Apr 2006 12:38:53 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1FTLtE-000260-Hq for hipsec@ietf.org; Tue, 11 Apr 2006 12:38:52 -0400
Received: from twilight.cs.hut.fi ([130.233.40.5]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1FTLtD-0000Zs-7n for hipsec@ietf.org; Tue, 11 Apr 2006 12:38:52 -0400
Received: by twilight.cs.hut.fi (Postfix, from userid 60001) id A187630C3; Tue, 11 Apr 2006 19:38:50 +0300 (EEST)
X-Spam-Checker-Version: SpamAssassin 3.1.1-niksula20060321 (2006-03-10) on twilight.cs.hut.fi
X-Spam-Level:
X-Spam-Status: No, score=-1.4 required=5.0 tests=ALL_TRUSTED autolearn=failed version=3.1.1-niksula20060321
X-Spam-Niksula: No
Received: from kekkonen.cs.hut.fi (kekkonen.cs.hut.fi [130.233.41.50]) by twilight.cs.hut.fi (Postfix) with ESMTP id 1FDB22F8D; Tue, 11 Apr 2006 19:38:50 +0300 (EEST)
Received: (from mkomu@localhost) by kekkonen.cs.hut.fi (8.11.7p1+Sun/8.10.2) id k3BGcmr08760; Tue, 11 Apr 2006 19:38:48 +0300 (EEST)
Date: Tue, 11 Apr 2006 19:38:48 +0300
From: Miika Komu <miika@iki.fi>
X-X-Sender: mkomu@kekkonen.cs.hut.fi
To: "Henderson, Thomas R" <thomas.r.henderson@boeing.com>
Subject: RE: [Hipsec] a state machine proposal for mm-03
In-Reply-To: <77F357662F8BFA4CA7074B0410171B6D01A2EFDA@XCH-NW-5V1.nw.nos.boeing.com>
Message-ID: <Pine.GSO.4.58.0604111916380.7243@kekkonen.cs.hut.fi>
References: <77F357662F8BFA4CA7074B0410171B6D01A2EFDA@XCH-NW-5V1.nw.nos.boeing.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
X-Spam-Score: 0.0 (/)
X-Scan-Signature: 8abaac9e10c826e8252866cbe6766464
Cc: hipsec@ietf.org
X-BeenThere: hipsec@lists.ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "This is the official IETF Mailing List for the HIP Working Group." <hipsec.lists.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@lists.ietf.org?subject=unsubscribe>
List-Archive: <http://www1.ietf.org/pipermail/hipsec>
List-Post: <mailto:hipsec@lists.ietf.org>
List-Help: <mailto:hipsec-request@lists.ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/hipsec>, <mailto:hipsec-request@lists.ietf.org?subject=subscribe>
Errors-To: hipsec-bounces@lists.ietf.org

On Mon, 10 Apr 2006, Henderson, Thomas R wrote:

> LOCATOR is just sent to the peer based on local mobility/policy
> decision, and the UPDATE is ACKed for reliability's sake.
> ECHO_REQUEST/RESPONSE is a nonce exchange, used by the peer for
> reachability test.  We describe some scenarios where these parameters
> can be piggybacked on the same UPDATE message, but there is no
> requirement to do so, and I would prefer not to constrain it in that
> way.  For instance, we should not require that the peer send the
> ECHO_REQUEST, nor should we require that the ACK of the LOCATOR also
> contain an ECHO_REQUEST rather than be in a separate packet.

Tried to loosen up the rules in favour of modularity. See if it is now
better. Not sure if it covers the peer initiated rekey case. Feel free to
modify the latest proposal accordingly. If you'd still like to discard it,
I think section 5 could still use some kind of summary that gathers up all
of the pieces, even the optional CBA.

> <rest of the comments>

Agree (based on a quick look). Feel free to modify the text accordingly
based on the latest version I sent.

> > Handling of CLOSE with ESP_INFO:
> > - TBD
>
> The other opinions seemed to be to not use CLOSE for this purpose.

Agree.

-- 
Miika Komu              miika@iki.fi          http://www.iki.fi/miika/

_______________________________________________
Hipsec mailing list
Hipsec@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/hipsec