Re: [Homenet-babel-sec] Security Design Team - July is coming!

[Juliusz Chroboczek <[e-mail]>]

> 1) The community agrees that we want to support them

I think there's a fair number of people who are.  I, for one, would like
to see them defined, although I'm not sure if they are really necessary --
I don't see an attack model that targets Hellos specifically.

> 2) The community hasn't yet come to a consensus on how to encode them,
> proposals included a new TLV, a flag in the existing TLV, and a sub-TLV.

I don't think we considered sub-TLVs, although this might be an option now
that we have mandatory bits.

> While the Homenet Babel profile could technically be achieved without
> unicast hellos, I think they expand our options, and since they are at the
> top of the Babel WG's agenda, it's worth waiting for them.

Agreed.

Antonin Décimo (in copy of this mail) will be doing an internship on Babel
this July.  The plan is to have him implement a prototype of
Stenberg-Schinazi security for Babel (unicast everything, protect using
DTLS).

My current plan is to ask him to do without unicast Hellos for now (this
means that Hellos will be unprotected), although it's up to Antonin --
perhaps he'll want to work on unicast Hellos first.

-- Juliusz