[Gen-art] Re: [Mip6] Gen-ART Review of draft-ietf-mip6-cn-ipsec-05

2007-09-11 Thread Christian Vogt
Francis, the purpose of Mobile IPv6 is to redirect packets for a home address to a care-of address. To authorize such redirection, one needs to ensure that the node requesting it is the home address owner. This is why it is necessary to have a strong binding between an IPsec SA and the home addr

[Gen-art] Re: [Mip6] Gen-ART Review of draft-ietf-mip6-cn-ipsec-05

2007-09-11 Thread Francis Dupont
In your previous mail you wrote: > => in fact the home address impersonation attack exists only in the mobile > node - home agent case, not in the mobile node - correspondent case. If a > node can use the address of another node to communicate with the > correspondent, establish so