Re: [MEXT] Reviews of draft-korhonen-mext-mip6-altsec

["Alper Yegin" <[e-mail]>]

RFC 4285
IESG Note

   This RFC is not a candidate for any level of Internet Standard.  RFC
   3775 and 3776 define Mobile IPv6 and its security mechanism.  This
   document presents an alternate security mechanism for Mobile IPv6
   used in 3GPP2 networks.

   The security properties of this mechanism have not been reviewed in
   the IETF.  Conducting this review proved difficult because the
   standards-track security mechanism for Mobile IPv6 is tightly
   integrated into the protocol; extensions to Mobile IPv6 and the core
   documents make assumptions about the properties of the security model
   without explicitly stating what assumptions are being made.  There is
   no documented service model.  

What is a "service model"? 


   Thus it is difficult to replace the
   security mechanism and see if the current protocol and future
   extensions meet appropriate security requirements both under the
   original and new security mechanisms.  If a service model for Mobile
   IPv6 security is ever formally defined and reviewed, a mechanism
   similar to this one could be produced and fully reviewed.

I'd guess we need to overcome this "service model" barrier even for the
other experimental RFCs for them to ever become a standard.