Re: [MEXT] [!! SPAM] Re: Well-known problem with authentication/etc. in wireless networks

Pete McCann <mccap@petoni.org> Wed, 31 August 2011 23:44 UTC

Return-Path: <mccap@petoni.org>
X-Original-To: mext@ietfa.amsl.com
Delivered-To: mext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11C2A21F8B84 for <mext@ietfa.amsl.com>; Wed, 31 Aug 2011 16:44:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.977
X-Spam-Level:
X-Spam-Status: No, score=-2.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ymLQpPsIGlCT for <mext@ietfa.amsl.com>; Wed, 31 Aug 2011 16:44:11 -0700 (PDT)
Received: from mail-bw0-f44.google.com (mail-bw0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id 2A19421F8B35 for <mext@ietf.org>; Wed, 31 Aug 2011 16:44:10 -0700 (PDT)
Received: by bkar4 with SMTP id r4so1626515bka.31 for <mext@ietf.org>; Wed, 31 Aug 2011 16:45:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=petoni.org; s=google; h=mime-version:x-originating-ip:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=tgF8HnJyOJkC1gUQLVKIa+imR5EXJKevp7+faLMB7to=; b=JvPJqw4ibBXJ5kNGyOuFZrR0mTywCYA3fy3pJD9Zq4z9k3Q/jAJcokA2/Sd5MB5C7M YL5F+A+SoY60ErmkKUP/TvUYWPuglJiQXmOuw6ZV/mKHZY42uG74mMA8jPbMXAvGQYPE kN6N4KPtT14u1BkwB4zhdRkoiJXuWsChG9k4o=
MIME-Version: 1.0
Received: by 10.204.146.137 with SMTP id h9mr544921bkv.316.1314834341673; Wed, 31 Aug 2011 16:45:41 -0700 (PDT)
Received: by 10.205.81.205 with HTTP; Wed, 31 Aug 2011 16:45:41 -0700 (PDT)
X-Originating-IP: [68.45.157.93]
In-Reply-To: <CAE_dhjuEUOfmOfHQvfw0LXY29DSgif--NUxK63uE+VFj0YT8Kg@mail.gmail.com>
References: <CA7EF880.197F2%hesham@elevatemobile.com> <4E5BDF45.9040702@computer.org> <CAE_dhjuEUOfmOfHQvfw0LXY29DSgif--NUxK63uE+VFj0YT8Kg@mail.gmail.com>
Date: Wed, 31 Aug 2011 19:45:41 -0400
Message-ID: <CACvMsLHmUvkHXj49AirrQPYk-t+8qde6ak-fUhiDDgsTH45VmA@mail.gmail.com>
From: Pete McCann <mccap@petoni.org>
To: Julien Laganier <julien.ietf@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: charliep@computer.org, mext <mext@ietf.org>
Subject: Re: [MEXT] [!! SPAM] Re: Well-known problem with authentication/etc. in wireless networks
X-BeenThere: mext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Mobile IPv6 EXTensions WG <mext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mext>, <mailto:mext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mext>
List-Post: <mailto:mext@ietf.org>
List-Help: <mailto:mext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mext>, <mailto:mext-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 31 Aug 2011 23:44:12 -0000

Julien,

On Wed, Aug 31, 2011 at 3:11 PM, Julien Laganier <julien.ietf@gmail.com> wrote:
> Hello Charlie,
>
> Mutual authentication between the MN and the HA is only required at
> binding creation to set-up the MIPv6 security association that is
> keyed with the Home Address; the same security association is then
> used to protect further binding updates. Thus there is no
> serialization of authentication used for network access and MIPv6.

Many of the DMM proposals seem to contemplate getting a new HA
upon every new attachment to the network.  It seems to me that it
would be in scope to consider optimization of the setup of the security
association with the newly met HA and that this could somehow leverage
the network access authentication that has just taken place.

-Pete