Re: Please refresh my memory on HIP_SIGNATURE in UPDATE
Robert Moskowitz <[email protected]> Mon, 19 Sep 2016 07:44:22 +0100
| Newsgroups | gmane.ietf.hipsec,gmane.ietf.hip |
|---|---|
| Message-ID | <[email protected]> |
On 09/19/2016 05:19 AM, Tom Henderson wrote: > > > > On Sun, 18 Sep 2016, Robert Moskowitz wrote: > >> I cannot remember why we mandated HIP_SIGNATURE in UPDATE packet, >> particularly when we have the HIP_MAC. Sec 5.3.5 in 7401. >> >> I am sure we had a good reason, but I am not finding it.... > > For middleboxes; this dates back to section 6.1.1 of > https://tools.ietf.org/html/draft-nikander-hip-mm-00 Ah yes, those nasty guys in the middle by policy. In a perfect IPv6 mobile world they don't exist, but we know otherwise... Thanks for the refresher. Bob