Re: [MEXT] re-direction attack on MCoA

Hi Marcelo:

I think there should be a separate draft for the RR check to the CoA. The problem is everywhere and not specific to MCoA, just like it's not specific to DSMIP. 

The trouble is that the draft in question is never started. I'll be happy to give away the text from RRH for that noble purpose ;)

Pascal

>-----Original Message-----
>From: marcelo bagnulo braun [mailto:marcelo@it.uc3m.es] 
>Sent: mercredi 30 janvier 2008 17:46
>To: Pascal Thubert (pthubert)
>Cc: Wassim Haddad; Benjamin Lim; Julien Laganier; mext@ietf.org
>Subject: Re: [MEXT] re-direction attack on MCoA
>
>Pascal,
>
>The question at this point is the following one: do you think 
>that this threat should be addressed in the MCoA draft itself?
>
>comments?
>
>Regards, marcelo
>
>
>El 30/01/2008, a las 10:09, Pascal Thubert (pthubert) escribió:
>
>> I agree with Wassim on both mails.
>>
>> There's also the situation where the MN/MR might be fooled by the 
>> visited network into believing that the CoA (or its prefix if a 
>> network is attacked as opposed to a host) is on the visited link. 
>> DSMIP is also exposed, in particular with IPv4 CoAs.
>>
>> There are many scenarios that do not involve high mobility were a 3- 
>> way or a 4-way handshake could be used to verify the CoA. We have 
>> proposed such a test in section 6 of the RRH draft that uses a 
>> triggered 2nd BU flow to verify the CoA in the first one:
>> 
>http://tools.ietf.org/html/draft-thubert-nemo-reverse-routing-header-0
>> 7#
>> section-6
>>
>>
>> Pascal
>>
>>
>>> -----Original Message-----
>>> From: Wassim Haddad [mailto:whaddad@tcs.hut.fi]
>>> Sent: mercredi 30 janvier 2008 09:32
>>> To: Benjamin Lim
>>> Cc: 'Julien Laganier'; mext@ietf.org
>>> Subject: RE: [MEXT] re-direction attack on MCoA
>>>
>>> On Wed, 30 Jan 2008, Benjamin Lim wrote:
>>>
>>>> All in all, what I am trying to say is that tracing only 
>limits the 
>>>> effect of the attack from escalating further and not preventing it.
>>>
>>> => which (again) also perfectly applies to a single CoA.
>>>
>>>
>>> Regards,
>>>
>>> Wassim H.
>>>
>>>
>>> _______________________________________________
>>> MEXT mailing list
>>> MEXT@ietf.org
>>> https://www1.ietf.org/mailman/listinfo/mext
>>>
>>
>> _______________________________________________
>> MEXT mailing list
>> MEXT@ietf.org
>> https://www1.ietf.org/mailman/listinfo/mext
>
>
_______________________________________________
MEXT mailing list
MEXT@ietf.org
http://www.ietf.org/mailman/listinfo/mext