Re: Comments on draft-crocker-mast-proposal-00.txt

[Erik Nordmark <Erik.Nordmark@sun.com>]

> I had not known about the Purpose-Built Key internet-draft.  It seems perfect
> for the security MAST needs to provide, specifically to avoid hijacking the
> MAST association.

A perhaps useful data point is that during the exercise of securing MIPv6
binding updates to arbitrary correspondents I originally thought that
something  like PBK would be the result, but some careful anaylsis resulted in
a simpler  scheme which just uses 3-way handshake to effictive establish a
cookie. (Both PBK and MIPv6 with this technique are subject to MiTM attacks
by somebody on the path over which the packets travel, so the
resulting security is close to the same.)

YMMV - multihoming locator switching might have some other factors to
take into account when doing the tradeoffs on how to provide security.

  Erik