Tim Shepard wrote:...
If security is not needed, then perhaps we don't even need to use the HBA scheme. If security is needed, then perhaps this scheme isn't much better than using some public key cryptography.
We know that security is needed. full stop.
Also, whether HBA is better or worse than PK crypto isn't quite the point for me (chair hat off). As long as HBA is strong enough, the fact that it doesn't require any kind of PKI is an enormous benefit. Multihoming needs to work between any arbitrary pair of hosts, and doing that without PKI is an enormous win.
Brian