Subject: Re: [dhcwg] I-D Action: draft-ietf-dhc-sedhcpv6-04.txt

From: Sheng Jiang <[email-masked]>
Date: Thu, 9 Oct 2014 02:53:16 +0000

Hi, DHC,

The authors have recently submitted an update version to addressed comments from mail list. The major modifications include:

- Making timestamp an independent and optional option.
- Reduce the serverside authentication to base on only client's certificate.
- Reduce the clientside authentication to only Leaf of Faith base on server's public key.

Reviews and comments are appreciated.

Best regards,

Sheng

>-----Original Message-----
>From: dhcwg [mailto:[email-masked]] On Behalf Of
>[email-masked]
>Sent: Tuesday, September 30, 2014 3:14 PM
>To: [email-masked]
>Cc: [email-masked]
>Subject: [dhcwg] I-D Action: draft-ietf-dhc-sedhcpv6-04.txt
>
>
>A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Dynamic Host Configuration Working Group
>of the IETF.
>
>        Title           : Secure DHCPv6
>        Authors         : Sheng Jiang
>                          Sean Shen
>                          Dacheng Zhang
>                          Tatuya Jinmei
>	Filename        : draft-ietf-dhc-sedhcpv6-04.txt
>	Pages           : 23
>	Date            : 2014-09-30
>
>Abstract:
>   The Dynamic Host Configuration Protocol for IPv6 (DHCPv6) enables
>   DHCPv6 servers to pass configuration parameters.  It offers
>   configuration flexibility.  If not being secured, DHCPv6 is
>   vulnerable to various attacks, particularly spoofing attacks.  This
>   document analyzes the security issues of DHCPv6 and specifies a
>   Secure DHCPv6 mechanism for communications between DHCPv6 clients
>and
>   DHCPv6 servers.  This document provides a DHCPv6 client/server
>   authentication mechanism based on server's public/private key pairs
>   and client's certificates.  The DHCPv6 message exchanges are
>   protected by the signature option and the timestamp option newly
>   defined in this document.
>
>
>The IETF datatracker status page for this draft is:
>https://datatracker.ietf.org/doc/draft-ietf-dhc-sedhcpv6/
>
>There's also a htmlized version available at:
>http://tools.ietf.org/html/draft-ietf-dhc-sedhcpv6-04
>
>A diff from the previous version is available at:
>http://www.ietf.org/rfcdiff?url2=draft-ietf-dhc-sedhcpv6-04
>
>
>Please note that it may take a couple of minutes from the time of submission
>until the htmlized version and diff are available at tools.ietf.org.
>
>Internet-Drafts are also available by anonymous FTP at:
>ftp://ftp.ietf.org/internet-drafts/
>
>_______________________________________________
>dhcwg mailing list
>[email-masked]
>https://www.ietf.org/mailman/listinfo/dhcwg