Re: Revised e2e multihoming ID

[Pekka Nikander <Pekka.Nikander@nomadiclab.com>]

Ohta-san,

Masataka Ohta wrote:
> 6. Security Considerations
>
>    The author believes there is no special security concern.
You don't discuss the potential flooding DoS attack that
has been discussed at this list a few times during the last
days, and that was fairly well documented in
draft-aura-mipv6-bu-attacks-01.txt (expired, but available at
http://research.microsoft.com/users/tuomaura/Mobile%20IPv6/draft-aura-mipv6-bu-attacks-01.txt )

draft-aura considers the flooding only in the context of
MIPv6, but it applies almost directly to the kind of
end-host multi-homing you are suggesting.

You also don't discuss potential problems due to DNS
spoofing.  Even though the situation in your proposal
does not seem to be any worse than today, IMHO the
small differences and their implications should be
briefly discussed.

--Pekka Nikander