In article <[EMAIL PROTECTED]> (at Thu, 4 Aug 2005 10:39:00 +0530), Srinivas 
Goud <[EMAIL PROTECTED]> says:

> I do agree with your points, but if you loot at rfc3775, it says that
> 
> " The use of IPsec Authentication Header (AH) for the Home Address option is 
> not required, except that if the IPv6 header of a packet is covered by AH, 
> then the authentication MUST also cover the Home Address option; this 
> coverage is achieved automatically by the definition of the Option Type code 
> for the Home Address option, since it indicates that the data within the 
> option cannot change en route to the packet's final destination, and thus 
> the option is included in the AH computation."
> 
> from the above, it is satisfactory that final destination option cannot be 
> mutable.
> any opinions?

No. It is only a instance of destination options.
Because it is possible to have other destination option(s),
you cannot assume that "final" destination option is not mutable
just by its position.

--yoshfuji

--------------------------------------------------------------------
IETF IPv6 working group mailing list
[email protected]
Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to