Re: [nbs] NBS and TCP connection identification

[Christian Vogt <[e-mail]>]

Remi wrote:

> In my understanding NBS and address changes can remain independent, and therefore should remain so.
> - A connection initiation starts with the source and destination names chosen by the initiator (and with valid addresses for them at that time).
> The acceptor advertises at the NBS the names it received.
> It may have before that checked, with a direct a DNS query, that source address and source name are consistent, or do it after signaling the incoming connection, or never, at its own choice. 
> - Shim6, if present, works as before.
> 
> Does this make sense to you?


I think it does.  So let me summarize:  

You are proposing that the responder should present the initiator's name as received to the responding application, without verification.  It is then up to the responding application to verify the initiator's name if needed.  Correct?

Needless to say, if the initiator does not provide a name -- e.g., because it does not have a name registered in the DNS --, the responder would generate a name for the initiator based on the initiator's IP address.  Such a "synthesized" name does not have to be verified; it already provides the same level of security that we have today.

Is this summary accurate?

- Christian