Re: [Hipsec] Please refresh my memory on HIP_SIGNATURE in UPDATE

2016-09-18 Thread Robert Moskowitz



On 09/19/2016 05:19 AM, Tom Henderson wrote:




On Sun, 18 Sep 2016, Robert Moskowitz wrote:

I cannot remember why we mandated HIP_SIGNATURE in UPDATE packet, 
particularly when we have the HIP_MAC.  Sec 5.3.5 in 7401.


I am sure we had a good reason, but I am not finding it


For middleboxes; this dates back to section 6.1.1 of
https://tools.ietf.org/html/draft-nikander-hip-mm-00


Ah yes, those nasty guys in the middle by policy.  In a perfect IPv6 
mobile world they don't exist, but we know otherwise...


Thanks for the refresher.

Bob

___
Hipsec mailing list
Hipsec@ietf.org
https://www.ietf.org/mailman/listinfo/hipsec


Re: [Hipsec] Please refresh my memory on HIP_SIGNATURE in UPDATE

2016-09-18 Thread Tom Henderson




On Sun, 18 Sep 2016, Robert Moskowitz wrote:

I cannot remember why we mandated HIP_SIGNATURE in UPDATE packet, 
particularly when we have the HIP_MAC.  Sec 5.3.5 in 7401.


I am sure we had a good reason, but I am not finding it


For middleboxes; this dates back to section 6.1.1 of
https://tools.ietf.org/html/draft-nikander-hip-mm-00

- Tom

___
Hipsec mailing list
Hipsec@ietf.org
https://www.ietf.org/mailman/listinfo/hipsec