[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Unique identifiers and privacy



I am not sure if this is the right mailing list for this discussion,
but I thought I should respond to Pekka's mail.

Pekka Nikander wrote:

For route optimisation, it is not encrypted, as IPsec is typically
not used in the RO case.

you can use it if you want to.

IPv6 hdr (MN_CoA, dst=CN)
ESP hdr
IPv6 hdr (MN_HoA, dst=CN)
Payload

you just need sufficient trust to run IPsec with the CN.

If IPsec is used with RO, I don't remember
what the specs say, but that doesn't currently matter much since
IPsec cannot really be used with RO until MOBIKE WG produces its
results.

why? MIP signaling can be used to update the tunnel end points.

Vijay