Re: [tcpm] tcp-auth-opt issue: support for NATs

> -----Original Message-----
> From: Ted Faber [mailto:faber@ISI.EDU] 
> Sent: Monday, August 11, 2008 4:46 PM
> To: Dan Wing
> Cc: 'Eric Rescorla'; 'Ron Bonica'; 'Adam Langley'; 
> tcpm@ietf.org; 'Joe Touch'
> Subject: Re: [tcpm] tcp-auth-opt issue: support for NATs
> 
> On Mon, Aug 11, 2008 at 12:32:41PM -0700, Dan Wing wrote:
> > > - Key-ids must be globally unique.
> > > - You need to know the other side's IP address, even if 
> you're doing
> > >   a passive open.
> > 
> > Adding 32 bits to the key-id would create the same global uniqueness
> > that using the source IPv4 addresses accomplishes.
> 
> There's a little more to a establishing a global namespace than
> allocating the bits.  Using the IP address is capitalizing on the IP
> address allocation authorities and routing systems to keep those
> addresses unique at any given time (and "unique" is somewhat 
> approximate even with those mechanisms).
> 
> One can establish a global namespace here if needed, but 
> there's more to
> do than allocate the field space.

So you want something exceeding "the same global uniqueness" of a v4 address.

-d

> -- 
> Ted Faber
> http://www.isi.edu/~faber           PGP: 
> http://www.isi.edu/~faber/pubkeys.asc
> Unexpected attachment on this mail? See 
> http://www.isi.edu/~faber/FAQ.html#SIG
> 

_______________________________________________
tcpm mailing list
tcpm@ietf.org
https://www.ietf.org/mailman/listinfo/tcpm