Re: Issue 60: Addresses in IKE_SA_INIT/AUTH

Jari Arkko <[email protected]> Mon, 24 Oct 2005 13:15:54 +0300

Newsgroups	gmane.ietf.mobike
Message-ID	<[email protected]>

Tero,

>Moving it to the IKE_AUTH will get it encrypted, thus reading it
>requires man in the middle attack, and also changes the protocol so we
>can always take the IP address from the IKE_AUTH packet (no need to
>separate processing for NAT-T allowed or no NAT-T allowed). 
>  
>
Hmm... OK, now I'm starting to like this better. Pasi?

--Jari