Re: [Roll] Ralph Droms' Discuss on draft-ietf-roll-of0-15: (with DISCUSS and COMMENT)

[Ralph Droms <[e-mail]>]

On Aug 9, 2011, at 10:52 AM 8/9/11, Michael Richardson wrote:

> 
>>>>>> "Ralph" == Ralph Droms <[e-mail]> writes:
>    Ralph> 5. In section 4.2.1, what does it mean to "validate a
>    Ralph> router"?  Why would a router that passes validation
>    Ralph> ("succeeded that validation process") only be "preferable"?
> 
> I think, it refers to rpl-19 section 3.2.3, to the "authenticated" mode.
> This mode is completely unworkable with asymmetric crypto.   I guess I
> need to write an ID that explains this better.

Pascal - can you confirm that section 4.2.1 refers to rpl-19 section 3.2.3?

- Ralph

> The reason why an authenticated router is only preferred is because the
> node might need to get online in order to actually validate things.  Any
> node which will pass enough traffic so that a new node can validate some
> certificate chain is good enough.  
> 
> While a new node can do all manner of DOS attacks to prevent the
> prospective node from validating some security properties, none of them
> (if you trust your crypto) are worse than having the prospective node
> find itself without any network.
> 
> -- 
> ]       He who is tired of Weird Al is tired of life!           |  firewalls  [
> ]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
> ] [e-mail] http://www.sandelman.ottawa.on.ca/ |device driver[
>   Kyoto Plus: watch the video <http://www.youtube.com/watch?v=kzx1ycLXQSE>
> 	               then sign the petition.