RE: [Mip6] WG LC (Deadline Dec 18th, 04) for I-Ds: draft-ietf-mip6-auth-protocol-01.txtand draft-ietf-mip6-mn-ident-option-00.txt

Rajeev -

Thanks for the comments, please see inline ... 

> -----Original Message-----
> From: mip6-bounces@ietf.org [mailto:mip6-bounces@ietf.org] On 
> Behalf Of Rajeev Koodli
> Sent: Wednesday, December 15, 2004 2:51 PM
> To: Francis Dupont
> Cc: mip6@ietf.org; Basavaraj.Patil@nokia.com
> Subject: Re: [Mip6] WG LC (Deadline Dec 18th,04) for I-Ds: 
> draft-ietf-mip6-auth-protocol-01.txtand 
> draft-ietf-mip6-mn-ident-option-00.txt
> 
> 
> 
> Francis Dupont wrote:
> 
> > - 5.2 MN-AAA auth mob option: the BA is not protected. This is a
> >   major security issue.
> >  
> >
> HA _could_ include MN-HA auth option in the BA.

Correct, that was an oversight - has been fixed now.

> 
> Also, I have few nits:
> 
> - replace HAAA by AAAH
Sure.

> - Authenticator is not a good term. It reflects a node rather 
> than data. 
> How about Authentication Data?

Resonable.

> - Section 5.2: is CHAP_SPI the only value defined? If so, the 
> following statement should remove "When" to disambiguate.

Changed to have HMAC_SHA1 as the only algorithm now.

> - Bootstrapping session key with HA using MN-AAA 
> authentication is deliberately omitted? Perhaps making it 
> clear would be useful.

Yes, that is intentional to maintain the scope of the draft and converge in
a timely manner. We may publish the session key generation draft soon.

> - I guess NAI is not optional in the BU containing MN - AAA 
> auth option? 

Well, it can be optional - if the AAA uses IP address to identify the MN and
MN
Uses static addresses. We are keeping it optional (since the base draft uses
static
IP addresses).

> Please fix the operational flow diagram/text

Per Francis's comments, right? If so, I have modified it.

Thx
-a
> 
> Regards,
> 
> -Rajeev
> 
> 
> 
> 
> 
> _______________________________________________
> Mip6 mailing list
> Mip6@ietf.org
> https://www1.ietf.org/mailman/listinfo/mip6
> 

_______________________________________________
Mip6 mailing list
Mip6@ietf.org
https://www1.ietf.org/mailman/listinfo/mip6