Re: [homenet] Ted's security talk at IETF99: DNCP Security

[Ted Lemon <[e-mail]>]

So what you're saying is ephemeral is the keying used for the initial
exchange?

On Tue, Aug 1, 2017 at 4:48 PM, Michael Richardson <[e-mail]>
wrote:

>
> Ted Lemon <[e-mail]> wrote:
>     > You agree that it's a different problem right?
>
>     mcr> The common part is that one might have a similar set of external
>     mcr> (physical) signals.
>
>     mcr> Should Dave bring his printer to the IETF network, and they
> happen to
>     mcr> discovery each other via privacy-enhanced dnssd magic (cf: Arthur
> Clark's
>     mcr> definition of magic), then it would be good that they can prove
> that it's
>     mcr> really them.
>
>     > To be honest, I probably missed the point you were making—I just
> went back
>     > and reviewed this exchange, and I don't actually understand what the
>     > distinction is that you are making between ephemeral and long-lived
>     > relationships.
>
> This thread started by being about the problem of getting devices in the
> home
> to securely join the homenet.  One sees a list of possible routers in the
> home, and identifies one that should belong, and tells your homenet that it
> should be allowed to join.  (And the router also is told to join your
> network).
>
> The short-term exchange is where you discover the new router and do the
> out-of-band secured exchange to establish initial trust.  Within that
> initial
> trust, longer-term credentials (asymmetric keys) are exchanged.
>
>
> --
> Michael Richardson <[e-mail]>, Sandelman Software Works
>  -= IPv6 IoT consulting =-
>
>
>
>