Re: [saag] Fw:Fw:New Version Notification for draft-cui-dhc-dhcpv6-encryption-02.txt

[Randy Bush <[e-mail]>]

TOFU is a bit oxymoronic, or certainly abuses 'trust'.  it is more like
You Undergo Big Attack.  it just gives you some assurance the attacker
is reproducible.  

but this is a tangent.  the point is that protocols which rely on
keying really need to nail the key distribution model(s).  

while tofu may be one, is it really one that security folk think the
ietf should advocate for set-up authenticity?  it's not how i want to
make the wsj; and coffee shop mitm will be in the wsj soon enough.

randy