Subject: RE: [NSIS] RMD Security

From: Attila Báder (IJ/ETH) <[email-masked]>
Date: Sun, 31 Jul 2005 18:19:17 +0200

Hi John and All, 

Yes, it is great finding that this signaling mechanism solves important security concerns regarding stateless domains. Actually, we did not think of this security feature originally, so thanks to Hannes for pointing it out. We will make it explicite in the next version of the draft. 

Best regards, Attila

> -----Original Message-----
> From: [email-masked] [mailto:[email-masked]]
> Sent: Saturday, July 30, 2005 1:45 PM
> To: [email-masked]; [email-masked];
> [email-masked]
> Subject: RE: [NSIS] RMD Security
> 
> 
> hi john,
> 
> >Hannes,
> >
> >Replying to part of this mail:
> >
> > > The first very important aspect that I had to realize was 
> the there is
> > > always a message exchange like the  one shown in Fig. 1. 
> This message
> > > exchange below takes place even if there is no end-to-end 
> signaling
> > > session. If RMD is triggered based on an e2e signaling  
> session then the
> > > RESERVE is created by a node  outside the RMD domain and will
> > > subsequently travel further on (e.g., to the data 
> receiver). Such an
> > > exchange is shown in Fig. 3 of [RMD]. Hence, the security 
> of RMD should
> > > always been seen as a combination  of these two exchanges.
> >
> >Should we write-up some considerations that the combination of the
> >two exchanges are a potential security mechanism?  What I 
> mean is if they
> >can be matched and this match is used to verify authenticity of the
> >reservation, then this could be used a protection against 
> DoS attacks,
> >especially if state is not created until the RESERVE' is received and
> >matched against the RESERVE message.  This is somewhat 
> conceptually related
> >to return routability in MIPv6.
> 
> you are right. i also think that the discussions we had in 
> the rmd context 
> could be valuable for other areas.
> we haven't updated the rmd document with regard to this aspect but we 
> certainly should. still, i think further analysis is need to 
> complete the 
> picture.
> 
> ciao
> hannes
> 
> >
> >thoughts?
> >John
> >
> >_______________________________________________
> >nsis mailing list
> >[email-masked]
> >https://www1.ietf.org/mailman/listinfo/nsis
> 
> 
> 
> _______________________________________________
> nsis mailing list
> [email-masked]
> https://www1.ietf.org/mailman/listinfo/nsis
> 

_______________________________________________
nsis mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/nsis