Jiang,

Between CGA and DHCP, there are actually two directions: a) using DHCP
to serve/enable the generation/usage of CGA on host, this should be the
work content of CSI; b) using CGA to serve the security of DHCP, this is
mainly about extend DHCP with new options, it should be work item of DHC.
I hear you, and I see that the words you used for a and b are different. The problem is that I'm not convinced the solutions for a and be different.

For instance, let assume we had the capability for the host to suggest its own generated CGA as something that the DHCP server should allocate to the host. If we had this, then it would enable two things: (a) allow the use of CGA addresses with DHCP, and (b) allow the DHCP server to verify that all requests relating to this address come from the owner of the address.

Jari

_______________________________________________
CGA-EXT mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/cga-ext

Reply via email to