Re: [MEXT] [!! SPAM] Re: Well-known problem with authentication/etc. in wireless networks

Pete McCann <mccap@petoni.org> Thu, 25 August 2011 20:14 UTC

Return-Path: <mccap@petoni.org>
X-Original-To: mext@ietfa.amsl.com
Delivered-To: mext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05C7F21F8828 for <mext@ietfa.amsl.com>; Thu, 25 Aug 2011 13:14:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.977
X-Spam-Level:
X-Spam-Status: No, score=-2.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EV8eANcUyylR for <mext@ietfa.amsl.com>; Thu, 25 Aug 2011 13:14:30 -0700 (PDT)
Received: from mail-fx0-f44.google.com (mail-fx0-f44.google.com [209.85.161.44]) by ietfa.amsl.com (Postfix) with ESMTP id 63ACE21F8804 for <mext@ietf.org>; Thu, 25 Aug 2011 13:14:26 -0700 (PDT)
Received: by fxe6 with SMTP id 6so2248025fxe.31 for <mext@ietf.org>; Thu, 25 Aug 2011 13:15:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=petoni.org; s=google; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=R7XIJEDgyELrAdiSt+JYhhuBJbzhL5N58gVfjg9kDeU=; b=T/eA1pOOx7QT1vgf2Z0uEcYsvGUsG0eMPeh+0MquH95R/MmEMv1vcytVxYrH4Y1ZXm d4GDb77t9fZvoMztJ7OeAQVSOE7a52+kzvjFSoeZitH4ctSXVQCSlEyw+j5I78qKbaQZ v1Bn5KpUbIGmy/O/LWXZ3zuEBDmOz2XjV+6as=
MIME-Version: 1.0
Received: by 10.223.91.147 with SMTP id n19mr260018fam.53.1314303339020; Thu, 25 Aug 2011 13:15:39 -0700 (PDT)
Received: by 10.223.144.143 with HTTP; Thu, 25 Aug 2011 13:15:38 -0700 (PDT)
X-Originating-IP: [4.28.5.163]
In-Reply-To: <CA7C1479.F9D7%basavaraj.patil@nokia.com>
References: <CACvMsLHnBrOyfcy62ncxidenfC6KsqmhEHvikFLSx4WDNVJcfQ@mail.gmail.com> <CA7C1479.F9D7%basavaraj.patil@nokia.com>
Date: Thu, 25 Aug 2011 16:15:38 -0400
Message-ID: <CACvMsLHowYC0c2ddE1_tdaFhRmdBMd9baCPPoL0uJEbU6xQd0Q@mail.gmail.com>
From: Pete McCann <mccap@petoni.org>
To: Basavaraj.Patil@nokia.com
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: charliep@computer.org, mext@ietf.org
Subject: Re: [MEXT] [!! SPAM] Re: Well-known problem with authentication/etc. in wireless networks
X-BeenThere: mext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Mobile IPv6 EXTensions WG <mext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mext>, <mailto:mext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mext>
List-Post: <mailto:mext@ietf.org>
List-Help: <mailto:mext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mext>, <mailto:mext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 25 Aug 2011 20:14:32 -0000

On Thu, Aug 25, 2011 at 4:05 PM,  <Basavaraj.Patil@nokia.com> wrote:
>
> That¹s a good summarization Pete.
> But we do multiple authentications today.
> We do access authentication (1) and then we have to authenticate with the
> HA yet again in (3).
> That could be optimized.

Indeed.  It should be possible to borrow some keying material from (1)
to create an SA with an HA.  And you wouldn't necessarily use that SA
until you moved away from the initial point of attachment.

-Pete