Re: The state of IPv6 multihoming development

[Iljitsch van Beijnum <iljitsch@muada.com>]

On Mon, 28 Oct 2002, Peter Tattam wrote:

> The
> only security requirement that a MH solution needs to conform to would be
> equivalent to what we have in IPv4.  I believe this requirement is fully met by
> a syn/ack exchange of addresses on the primary addresses between the hosts.
> While this does not preclude a man in the middle attack steal the connection,
> neither does the BGP model preclude a man in the middle attack also in such a
> scenario.  I believe it could withstand a man on the side attack though.

This is a good point.

Sometimes the security people get carried away...