Re: Re: RR checks to avoid DoS attacks

> If the said DoS attacks are the only reason for RR checks in IKE based 
> signaling of mobility, I think that part of the protocol should be optional.

The widespread deployment of nodes which can be exploited into
performing DoS attacks on a third party victims is the single biggest
security problem facing the current Internet.  

I would be most upset if we ended up deploying another such set of
nodes as a result of this.

We absolutely must examine each potential DoS attack; we cannot, as
was once common, wave our hands and say that dealing with DoS attacks
is impossible.

						- Bill