[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: GSE

RJ Atkinson wrote:

Note that the security issues due to the relaxation can be solved
by stuff like HIP.

See smb's comments at www.research.att.com, URL posted by someone else
a few days back.  HIP has no special magic in this regard.

HIP has no special magic, I agree.  It just uses public keys
as primary identifiers.  That is pretty similar to what SSH
does today.  HIP has both an opportunistic mode, more or less
similar to the way SSH hosts learn the keys of the other hosts,
and a DNS(sec) based mode where you learn the public key of
the intended recipient form the DNS.  That latter comes, of
course, with the usual problems with DNS(sec) or any other
PKI (like) system.

From my point of view, the ability to use public keys as
primary identifiers of end-hosts opens up some interesting
ways to deal with some security problems.

--Pekka