[Mip6] Re: Using IPsec between mobile and correspondent IPv6 node

 In your previous mail you wrote:

       I have read draft-dupont-mipv6-cn-ipsec-00.txt, they sugguests to 

=> it is draft-ietf-mip6-cn-ipsec-01.txt now.

   use IPsec to protect Return routability (RR) method before process 

=> no, IPsec is used to verify HoA option and to protect RO signaling
in this draft.

   binding update.  It solves man in the middle attack problems in HA-CN 
   and  MN-CN path,right?  So, The Kbm using in BU and BA are safed now.

=> I believe you make some confusion between RFC 377[56] which uses
IPsec to protect some RR messages and the draft which protects directly
the BU/BA,

       But Instead of using IPSec to protect RR method, why we don't use 
   IPSec to protect BU?

=> this is the idea of the draft.

    Does it make handoff process faster? :-)

=> of course it is faster because there is no RR phase (.5 RTT in place
of >1.5 RTT).

Can you read the last version and if you find it is not clear enough
propose improvements? I know the wording is not so good and as it will
be last called soon...

Thanks

Francis.Dupont@enst-bretagne.fr

_______________________________________________
Mip6 mailing list
Mip6@ietf.org
https://www1.ietf.org/mailman/listinfo/mip6