Re: Reasonable to use crypto in all communications? (Re: Fwd: Minutes/ Notes)

[Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>]

Pekka Nikander;

> The id/loc mapping itself needs some kind of protection,

For most mapping, cookie is the protection.

For mobility mapping, the protection should use shared secret.

> However, if unencrypted,
> non-integrity protected ESP was allowed, one could use the SPI
> in the ESP header as a kind of condensed identifier, without
> any cryptographic protection.

It is a poor form of cookie with so much extra overhead.

							Masataka Ohta