>    Assuming you send a binding-update in the SYN, then 
> communication using the
>    home address will be relatively efficient - just a little 
> more overhead in
>    the packets, but no extra packets and no packets going 
> through the home
>    agent.
>    
> => even the idea of a binding-update in the SYN seems nice 
> this will not
> work like this a the real word because the binding-update must be
> authentic ie a security association must be established before.
> If you use IKE with certificates then this can be more expensive than
> to go through the tunnel and can add a delay before the connection
> set up.

Well, that's a good point - I'd forgotten about the security overhead of
protecting the binding update. But I still think the default should be for a
mobile node to use a home address instead of a care-of address, unless there
is app or user guidance (like the "this is a short-lived socket" option).

Rich
--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to