marcelo bagnulo braun wrote:
shim without proper security is simply inacceptable. We must provide a
security mechanism (at least one) from the start of the shim will not
fly.
I fully agree with this.
And saying use IPSec in the security considerations section will not
fly, because oportunistic IPSec does not make a proper job and pre
shared keys and PKI are not feasible in the short term.
The short version of my opinion is that I do
not see IPsec as a mechanism that satisfies
the goals of Shim6.
The longer version: I do like modular design,
and I don't mind having the possibility of several
different methods, possibly including IPsec, to
exist in addition to the mandatory to implement
mechanism for Shim6.