Re: New draft on embedding the RP address in IPv6 multicast address

[Brian Haberman <bkhabs@nc.rr.com>]

Gert Doering wrote:
> Hi,
>
> On Thu, Oct 10, 2002 at 02:58:10PM -0400, Brian Haberman wrote:
>
> > Mike O'Connor wrote:
> >
> > > Is there an underlying assumption that a given group has all of it's
> > > sources in one PIM domain? 
> >      In a previous append, I pointed out that there is still an
> > open issue with a sender being outside of the PIM domain that
> > allocated the address.
>
> Just an idea.  What about sending a PIM register from the sender's RP 
> to the RP that belongs to the multicast address?  It would need another 
> protocol change, of course.
It can lead to a DoS attack on the embedded address.  A bad guy could
embed any address in the multicast address that it wants to attack.
So using register messages would require some type of authentication
mechanism.

Brian