Re: [pcp] About selecting a key management for PCP

Alper Yegin <alper.yegin@yegin.org> Thu, 02 August 2012 12:32 UTC

Return-Path: <alper.yegin@yegin.org>
X-Original-To: pcp@ietfa.amsl.com
Delivered-To: pcp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FFD721F8A1D for <pcp@ietfa.amsl.com>; Thu, 2 Aug 2012 05:32:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.001, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kXfhYJMD0I0P for <pcp@ietfa.amsl.com>; Thu, 2 Aug 2012 05:32:20 -0700 (PDT)
Received: from mout.perfora.net (mout.perfora.net [74.208.4.194]) by ietfa.amsl.com (Postfix) with ESMTP id 0855E21F88C4 for <pcp@ietf.org>; Thu, 2 Aug 2012 05:32:20 -0700 (PDT)
Received: from [192.168.2.5] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus4) with ESMTP (Nemesis) id 0Lnxom-1TPdgW0oS8-00gObw; Thu, 02 Aug 2012 08:32:12 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset="windows-1252"
From: Alper Yegin <alper.yegin@yegin.org>
In-Reply-To: <C72CBD9FE3CA604887B1B3F1D145D05E2CE62CD3@szxeml528-mbx.china.huawei.com>
Date: Thu, 02 Aug 2012 15:32:06 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <0096E801-3D17-4751-981A-67A46B96F739@yegin.org>
References: <C72CBD9FE3CA604887B1B3F1D145D05E2CE62CD3@szxeml528-mbx.china.huawei.com>
To: Zhangdacheng <zhangdacheng@huawei.com>
X-Mailer: Apple Mail (2.1278)
X-Provags-ID: V02:K0:GMw2YNkCZyB1wA5itlfjnuQmueOqsJRhT8mWp6rkZtf xFgWRTwwbaVEDWT6zELIEXkP+rtk5AoNZjefWQ96DwUVfz66eT 0lq5pBBRomkjb/Vzayp2YR7EmUH5faqxsRECOrVG/4cdZp1S2R W+JCLI5FJEEY15+4vC6Yhg3D9oQb17YgtrIHm/ZHRm46wPnxmD 0UGKZsY7qynoXCS3AL9dpxf+fD8OGHKzYoAjyE2n5mQ6s+8w+M EhnTIsM7ChYIL4wXZKVSn8DETfV0Ugurp1FvImkl2sE5DorNM6 azmOWkRyTVK260NrRRYwiaqmO0WLaSZZvzWfRSFA9VR7cLKo/H a/kUDcIiUzeng044z1lxk1V7/z/HQKvhWAovadb3FTUZwuvGrT +t2BJT0qQl72w==
Cc: Margaret Wasserman <mrw@painless-security.com>, "pcp@ietf.org" <pcp@ietf.org>
Subject: Re: [pcp] About selecting a key management for PCP
X-BeenThere: pcp@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PCP wg discussion list <pcp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pcp>, <mailto:pcp-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pcp>
List-Post: <mailto:pcp@ietf.org>
List-Help: <mailto:pcp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pcp>, <mailto:pcp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Aug 2012 12:32:20 -0000

> an in-band authenticaiton mchanism for PCP (actually a simplified PANA).


It's not simplified…. It's basically growing PANA (an EAPoUDP transport) within PCP. A redundant work that'd result in more complexity than keeping two simple protocols separate. This "oh I'll just carry EAP over my favorite protocol (e.g., DHCP!), and it'd be sooo simple" was tried before and failed miserably.  PCP and its key management are two separate issues that deserve two separate protocols (similar to IKE and IPsec being separate). I don't see any value in cobbling them up, which is more like a PPP-style approach -- all-in-one. 

Alper



On Jul 31, 2012, at 1:50 PM, Zhangdacheng (Dacheng) wrote:

> Hi, All:
> 
> We have a discussion about the selection of a key management mechanism for PCP, but there is not a conclusion yet. Basically, people focus on two solutions, using PANA or generating an in-band authenticaiton mchanism for PCP (actually a simplified PANA). Now, there is a new draft draft-ohba-pcp-pana-00, which tries to specify the first one. So, maybe it is the right time to raise this disucssion again and decide the key management solution for PCP eventually.
> 
> Cheers
> 
> Dacheng
> _______________________________________________
> pcp mailing list
> pcp@ietf.org
> https://www.ietf.org/mailman/listinfo/pcp