Re: [MEXT] re-direction attack on MCoA

The idea at this point afaiu is to work on a draft trying to identify  
residual threats in mip6 and then figure out if we should do something  
about some of them

You are kindly invited to join that effort, that i understand GEorge,  
Wassim and Ben are starting

Regards, marcelo
El 06/02/2008, a las 14:28, Pascal Thubert (pthubert) escribió:

> Hi Marcelo:
>
> I think there should be a separate draft for the RR check to the  
> CoA. The problem is everywhere and not specific to MCoA, just like  
> it's not specific to DSMIP.
>
> The trouble is that the draft in question is never started. I'll be  
> happy to give away the text from RRH for that noble purpose ;)
>
> Pascal
>
>
>> -----Original Message-----
>> From: marcelo bagnulo braun [mailto:marcelo@it.uc3m.es]
>> Sent: mercredi 30 janvier 2008 17:46
>> To: Pascal Thubert (pthubert)
>> Cc: Wassim Haddad; Benjamin Lim; Julien Laganier; mext@ietf.org
>> Subject: Re: [MEXT] re-direction attack on MCoA
>>
>> Pascal,
>>
>> The question at this point is the following one: do you think
>> that this threat should be addressed in the MCoA draft itself?
>>
>> comments?
>>
>> Regards, marcelo
>>
>>
>> El 30/01/2008, a las 10:09, Pascal Thubert (pthubert) escribió:
>>
>>> I agree with Wassim on both mails.
>>>
>>> There's also the situation where the MN/MR might be fooled by the
>>> visited network into believing that the CoA (or its prefix if a
>>> network is attacked as opposed to a host) is on the visited link.
>>> DSMIP is also exposed, in particular with IPv4 CoAs.
>>>
>>> There are many scenarios that do not involve high mobility were a 3-
>>> way or a 4-way handshake could be used to verify the CoA. We have
>>> proposed such a test in section 6 of the RRH draft that uses a
>>> triggered 2nd BU flow to verify the CoA in the first one:
>>>
>> http://tools.ietf.org/html/draft-thubert-nemo-reverse-routing- 
>> header-0
>>> 7#
>>> section-6
>>>
>>>
>>> Pascal
>>>
>>>
>>>> -----Original Message-----
>>>> From: Wassim Haddad [mailto:whaddad@tcs.hut.fi]
>>>> Sent: mercredi 30 janvier 2008 09:32
>>>> To: Benjamin Lim
>>>> Cc: 'Julien Laganier'; mext@ietf.org
>>>> Subject: RE: [MEXT] re-direction attack on MCoA
>>>>
>>>> On Wed, 30 Jan 2008, Benjamin Lim wrote:
>>>>
>>>>> All in all, what I am trying to say is that tracing only
>> limits the
>>>>> effect of the attack from escalating further and not preventing  
>>>>> it.
>>>>
>>>> => which (again) also perfectly applies to a single CoA.
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Wassim H.
>>>>
>>>>
>>>> _______________________________________________
>>>> MEXT mailing list
>>>> MEXT@ietf.org
>>>> https://www1.ietf.org/mailman/listinfo/mext
>>>>
>>>
>>> _______________________________________________
>>> MEXT mailing list
>>> MEXT@ietf.org
>>> https://www1.ietf.org/mailman/listinfo/mext
>>
>>
> _______________________________________________
> MEXT mailing list
> MEXT@ietf.org
> http://www.ietf.org/mailman/listinfo/mext

_______________________________________________
MEXT mailing list
MEXT@ietf.org
http://www.ietf.org/mailman/listinfo/mext