RE: [Seamoby] [issue30] How to handle bad MN's authorization Toke n?

Rajeev, 

I don't recall whether there was a message authentication procedure between
the pAR and nAR, if there is none, and the pAR can't verify the authorization
token, then we may open the door to DoS attacks on the pAR. So responding to 
nAR may have bad consequences...
If there is no message authentication between nAR and pAR, while you are expecting
the MN to authenticate itself to pAR (to me this is half way solution), then the 
pAR should ignore the request.

Madjid

-----Original Message-----
From: seamoby-admin@ietf.org [mailto:seamoby-admin@ietf.org]On Behalf Of
Rajeev Koodli
Sent: Monday, December 08, 2003 1:14 PM
To: Seamoby CTP Issues
Cc: seamoby@ietf.org
Subject: Re: [Seamoby] [issue30] How to handle bad MN's authorization
Token?

John Loughney SEAMOBY-Issues wrote:

> New submission from John Loughney <john.loughney@nokia.com>:
>
> In case nAR requests the transfer by a CTR message, the pAR must verify
> the MN's authorization token. If this token is unvalid, what do we do ?
>
> Possible solutions:
>
>  - nothing ? the pAR does not answer to nAR.
>  - pAR indicates the error to nAR:
>         * In the CTD message.
>         * In a error message which could carry error information.
>

pAR MUST respond to nAR with an appropriate error.
nAR SHOULD convey the result to the MN.

-Rajeev

>
> others ?
>
> ----------
> category: Editorial
> document: draft-ietf-seamoby-ctp-05.txt
> messages: 39
> nosy: jloughney
> priority: Should Fix
> status: No Discussion
> title: How to handle bad MN's authorization Token?
> _____________________________________________________________
> Seamoby CTP Issues <ctp_issues@danforsberg.info>
> <http://danforsberg.info:8080/draft-ietf-seamoby-ctp/issue30>
> _____________________________________________________________
>
> _______________________________________________
> Seamoby mailing list
> Seamoby@ietf.org
> https://www1.ietf.org/mailman/listinfo/seamoby

_______________________________________________
Seamoby mailing list
Seamoby@ietf.org
https://www1.ietf.org/mailman/listinfo/seamoby

_______________________________________________
Seamoby mailing list
Seamoby@ietf.org
https://www1.ietf.org/mailman/listinfo/seamoby