Re: [pcp] Posted auth req slide that was edited during meeting

[Sam Hartman <[e-mail]>]

>>>>> "Alper" == Alper Yegin <[e-mail]> writes:

    Alper> Yeah, let me do that.

    Alper> Option 4 is based on using "expired" security associations as
    Alper> if they did not expire.

    Alper> This is obviously a bad idea. 

Alper, it's not obvious to me why using a security association for
status updates regarding an existing mapping is bad after it's expired
for new mappings.

I agree that we'll need to analyze the security of whatever we do and
document any attacks that result.

Would you care to explain why you think people set up security
association expiration so we can evaluate whether this particular use
opens up any attacks with regard to the design goals of security
association expiration?