Subject: [Pana] Question on draft-ietf-pana-pana-11

From: Lakshminath Dondeti <[email-masked]>
Date: Fri, 31 Mar 2006 17:29:39 -0800

Hi,

The PANA spec in Section 11.4 says:
In the absence of lower-layer security,
    both authentications MUST be able to generate a AAA-Key, leading to
    generation of a PANA SA.  The resultant PANA SA cryptographically
    binds the two AAA-Keys together, hence it prevents man-in-the-middle
    attacks.

I am curious about why the two AAA-keys need to be bound 
together.  What is the perceived MiTM attack and how does 
cryptographically binding the keys mitigate the attack?

Thanks in advance for any explanation.

thanks and regards,
Lakshminath 

_______________________________________________
Pana mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/pana