Re: WGLC: draft-ietf-hip-native-nat-traversal-15

Miika Komu <[email protected]> Tue, 21 Mar 2017 13:26:03 +0200
Newsgroups gmane.ietf.hipsec,gmane.ietf.hip
Organization Ericsson AB
Message-ID <[email protected]>
Hi Tom,

On 03/14/2017 11:19 AM, Miika Komu wrote:

[..]

> A couple of fixes for me to edit:
>
> * Appendix B: normative vs non-normative terminology
 > [...]

so the appendix was using normative terminology which was a bit strange. 
As a quick fix, I thought about moving this appendix to the body, but 
after reading this extension (that was inherited as a legacy from the 
earlier specification) I decided to remove it. The section basically 
suggested allowing source routing via HIP relay for the sake of 
compatibility with RVS servers. I think this could be exploited in a bad 
way to DoS other hosts. I think it is more secure if the HIP relay only 
forwards inbound packets, not outbound. If you disagree with this 
change, please discuss on the list.