Re: [secdir] New Mailing List: cgasec

Hi Margaret, all,

Margaret Wasserman wrote: 
> 
> Hi All,
> 
> We've put together a mailing list to discuss the use of
> Cryptographically Generated Addresses (CGAs) for security purposes
> across the internet.  The list address is cgasec@ietf.org.  To
> subscribe, go to:  https://www.ietf.org/mailman/listinfo/cgasec.
> 
> We have published a draft in this area that can be found here:
> 
> https://datatracker.ietf.org/doc/draft-dong-savi-cga-header/
> 
> [...]
> 
> Please send any feedback on the above document to the cgasec@ietf.org
> mailing list.  Please avoid cross-pointing your feedback to the full
> to: list on this message, unless you believe that it is pertinent to
> the hundreds or low thousands of people included on this message.
> Thank you.
> 
> We will be holding an old-fashioned Bar BOF in Maastricht (in a bar,
> no presentations), probably on Thursday night for folks who are
> interested in working our proposal, or related work in this technical
> area.  Further details about the bar BOF will be announced early next
> week, after I get to Maastricht and can scope out a location.
> 
> There has also been some earlier work in this area by Julien Lagnier,
> but I do not have a current reference.  Julien it is not my intention
> to omit your work from this discussion, so please feel free to send a
> pointer.

FWIW - here's a pointer:

http://tools.ietf.org/html/draft-laganier-ike-ipv6-cga

Abstract

   This document describes IKEv2 peer authentication via IPv6
   Cryptographically Generated Addresses (CGA).  This technique have
   been proposed to solve several security issues in the absence of any
   centralized trusted security infrastructure and without any pre-
   arrangements, to provide IPsec self-evident authentication mode
   between IPv6 nodes or security gateways.

(IPsec is misspelled IPSec on the online dratf, I've corrected in the copy/paste above :)

--julien