1. Wat is exactly meant with VALIDATOR_MIN_LIFETIME? According to the
draft, "the peer might reject Responder Validator options that are
older
than VALIDATOR_MIN_LIFETIME to avoid replay attacks" and "Nonces that
are no older than VALIDATOR_MIN_LIFETIME SHOULD be considered recent".
Does this value apply to both nonces and responder validator options?
Is this value solely used by a host acting as responder?
If so, do you agree that this value should be used outside SHIM6?
Because a responder may not store state (yet) and thus can not verify
if
a nonce in an I2 or I2bis message may be considered recent. If you
agree, can't this value be omitted from the document (since it is
independent of the correct working of SHIM6, but merely a security
consideration of the host)?
The version 7 of the document seemed unclear of how the Responder
Nonce
lifetime was determined since no per context state was sotred. I have
updated the draft, to make clear that the Responder nonce is obtained
from a counter that is increased in fixed periods (indepedently of
any
shim6 proto event) which allows to determine the age of a Responder
Nonce just by comparing it with the current value of the counter.