Re: WG next steps

[Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>]

Peter;

> >   > This is intuitively correct, but I have a hunch that 
> >   > pushing the intellegence
> >   > into the end points raises a whole bunch of security 
> >   > problems.  Traditionally
> >   > we believe routers have been secure (this may not be case 
> >   > in reality), and this
> >   > has been the motivation to find a solution that does not 
> >   > entail end point
> >   > intelligence to solve the MH problem.

I have never seen any router based solution claiming better security
than host based ones.

Are there really any?

> I will repeat what I said before that I think that any solution that involves
> crypto of any kind needs to be carefully thought through from the point of view
> of CPU resources on end hosts.  While the traditional mobile host end points
> probably don't care too much, for a general solution that would involve large
> servers with thousands of connections, the MH solution must be low cost in such
> an environment.

Combination of cookies, a hash function and reverse/forward DNS
is just fine to make mobile and multihomed hosts weakly secure.

							Masataka Ohta