Re: [ipwave] draft-ietf-ipwave-ipv6-over-80211ocb-00 Security of WSMP and WSA is FYI only

[William Whyte <[e-mail]>]

To be clear, WSMP has no inbuilt security. Higher layer entities that
use WSMP may send secured payloads but this is part of the application
specification, not provided by WSMP.

WSA is an example of such a higher layer entity; 1609.3 specifies
security mechanisms (from 1609.2) that are applied before sending the
WSA over WSMP. Note that whether or not to use the 1609.3 security
approach is up to individual deployments -- a private deployment, for
example, could conceivably decide to use different security or no
security, but the recommended approach is the one in 1609.3.

Cheers,

William

On Fri, Feb 10, 2017 at 2:52 AM, Alexandre Petrescu
<[e-mail]> wrote:
> draft-ietf-ipwave-ipv6-over-80211ocb-00
> Security of WSMP and WSA is FYI only
>
> Hello IPWAVErs,
>
> We received a comment suggesting that our mentioning of IEEE WSMP and
> WSA being secure should be FYI only (i.e. not req on IEEE, nor a
> statement about IEEE mechanism).  As such I remove the following paragraph:
>
> old:
>>
>> The WAVE protocol stack provides for strong security when using the
>> WAVE Short Message Protocol and the WAVE Service Advertisement
>> [ieeep1609.2-D17].
>
>
> Alex
>
>
>
> _______________________________________________
> its mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/its
>