Re: [secdir] pana-relay security considerations

[Margaret Wasserman <[e-mail]>]

Hi Alan,

On Jan 10, 2011, at 7:06 AM, Alan DeKok wrote:
>
>> I think we shall stick to relying on PAA-PRE security.
>
>  Then it should be a MUST.

I originally thought that we needed some form of PRE-PAA security, and  
your comments have, IMO, suggested more reasons why this is needed.

In my opinion, a security mechanism for PRE-PAA authentication needs  
to be defined in this spec before we publish it.  I think it should be  
optional to actually _use_ the security mechanism, though since there  
some situations (such as closed or otherwise secured networks) where  
this type of security isn't required operationally.  The security  
considerations should make it clear what the risks are, and describe  
the situations in which it would be safe not to use the PRE-to-PAA  
security.

Alan, would that satisfy your concerns?  PANA folks, would that meet  
your needs?

Margaret