Jari Arkko wrote: > It's probably best > to get the mentioned draft out, and deal with all the points that > have been raised, and then get back to the issue.
I just submitted the draft: Abstract Mobile IPv6 uses "return routability" to secure route optimization. Even after using this procedure, there are residual threats for which other stronger methods provide protection. Since these are optional, and return routability is the default, an attacker may engage in "bidding down" attacks. These attacks aim at coercing participants in Mobile IPv6 route optimization to forgo the stronger methods for the default return routability. This document discusses what the participants in route optimization can do to deter or alleviate bidding down attacks: the "step down" procedure for the mobile node and the "bit method" at the correspondent node. Before the official announcement you can also find it at: http://www.piuha.net/~jarkko/publications/mipv6/draft-montenegro-mipv6sec-bit-method-00.txt tnx, -gabriel -------------------------------------------------------------------- IETF IPng Working Group Mailing List IPng Home Page: http://playground.sun.com/ipng FTP archive: ftp://playground.sun.com/pub/ipng Direct all administrative requests to [EMAIL PROTECTED] --------------------------------------------------------------------
