Re: [MEXT] Well-known problem with authentication/etc. in wireless networks

Pete McCann <mccap@petoni.org> Thu, 25 August 2011 22:11 UTC

Return-Path: <mccap@petoni.org>
X-Original-To: mext@ietfa.amsl.com
Delivered-To: mext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0326B21F85F2 for <mext@ietfa.amsl.com>; Thu, 25 Aug 2011 15:11:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.977
X-Spam-Level:
X-Spam-Status: No, score=-2.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HH5IXC2gg0Im for <mext@ietfa.amsl.com>; Thu, 25 Aug 2011 15:11:41 -0700 (PDT)
Received: from mail-fx0-f44.google.com (mail-fx0-f44.google.com [209.85.161.44]) by ietfa.amsl.com (Postfix) with ESMTP id 19B2C21F85B5 for <mext@ietf.org>; Thu, 25 Aug 2011 15:11:40 -0700 (PDT)
Received: by fxe6 with SMTP id 6so2313484fxe.31 for <mext@ietf.org>; Thu, 25 Aug 2011 15:12:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=petoni.org; s=google; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=n+RuvaBzA/Uq+yhTK6lxUaZL9erheHMHoYHfkHxaAgE=; b=PnG46/pQXxrpC8wis1Btrn88fyWg/a/+hMVq26Tbzuet85zGamIiYRKOHwYJCyPEfB He+Oa+Z40LqrJ7FzYl1u83ALidDLCeuUVmICK2iAUrxj+O2Mmykbz3GhQJYnDuoZlc6J kmGAyh6iZbpq1hFWD3h38R6riDEmwQoFQi2PU=
MIME-Version: 1.0
Received: by 10.223.35.210 with SMTP id q18mr371085fad.148.1314310374894; Thu, 25 Aug 2011 15:12:54 -0700 (PDT)
Received: by 10.223.144.143 with HTTP; Thu, 25 Aug 2011 15:12:54 -0700 (PDT)
X-Originating-IP: [68.45.157.93]
In-Reply-To: <CAE_dhjuvZeywp+pN+gRh4hhZg_azq1RPa3hT0FVb=HDMwvECNQ@mail.gmail.com>
References: <4E554BAA.9080409@computer.org> <CAE_dhjtz5ue1noQwzb5gcCFa1gq_4EY-hxMhQRL07JAQNZq3bg@mail.gmail.com> <CACvMsLEgYZ+z05x9O978OuRG+fn=EqspPxjiBfV5VB2UvS0wWg@mail.gmail.com> <CAE_dhjuvZeywp+pN+gRh4hhZg_azq1RPa3hT0FVb=HDMwvECNQ@mail.gmail.com>
Date: Thu, 25 Aug 2011 18:12:54 -0400
Message-ID: <CACvMsLHqx68uKn5q1jZMcehERatAUuMu1xJ8B5N2zOSDSY0qTA@mail.gmail.com>
From: Pete McCann <mccap@petoni.org>
To: Julien Laganier <julien.ietf@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: charliep@computer.org, mext <mext@ietf.org>
Subject: Re: [MEXT] Well-known problem with authentication/etc. in wireless networks
X-BeenThere: mext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Mobile IPv6 EXTensions WG <mext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mext>, <mailto:mext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mext>
List-Post: <mailto:mext@ietf.org>
List-Help: <mailto:mext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mext>, <mailto:mext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Aug 2011 22:11:42 -0000

Hi, Julien,

On Thu, Aug 25, 2011 at 5:02 PM, Julien Laganier <julien.ietf@gmail.com> wrote:
> Yes, EAP authentication for IKEv2. Yes the MN needs to attach to the
> network first, as hosts currently do today already.

Right.  I think Charlie was asking whether MIP could be the network access
authentication protocol.

>> It may be interesting to look at whether access authentication and mobility
>> management can be combined.
>
> I don' t know what problem we would be solving by combining the two.

Making initial establishment of the SA with the HA (upon network attachment)
more efficient.  Making handovers faster and more efficient by reducing the
number of round-trip messages required.

-Pete