Re: [nemo] a special discussion session for threat analysis and security requirements

[Alexandru Petrescu <[e-mail]>]

S. Felix Wu wrote:
> 
> I forgot to mention in my earlier message -- if you can not attend 
> the meeting or the discussion meeting, you are very welcome to submit
>  your opinions and comments regarding the security issue in NEMO.
> 
>> In order for us to work together more effectively as a team and to 
>> consolidate different efforts, I proposed to TJ that maybe we 
>> should have a special meeting this week in Seoul to discuss about 
>> security issue. This special discussion will be open to any one who
>>  is interested in the security issue under NEMO.

Hello Felix,

I'm interested in the security discussion of the NEMO base protocol
now, and maybe later in other security aspects related to NEMO.

I've tried to summarize most important aspects of the security threats
for NEMO base protocol, as we understand them, in
draft-petrescu-nemo-threats-01.txt.  The document benefitted from one
NEMO WG member review.

While we're not sure at this time whether we can attend the meeting
you're proposing (I personally can not) I'm interested in participating
in the eventual online discussion.  If the meeting produces some
informal minutes, I'm interested to see them, thank you.

> you are very welcome to submit your opinions and comments regarding 
> the security issue in NEMO.

Where would one start?  I think the only two issues are: (1) location
privacy and (2) threats induced by the insecure NEMO dynamic HA discovery.

Alex