Re: issues 18, 15, 6 -- return routability

Francis Dupont writes:
>  In your previous mail you wrote:
> 
>      - If the specific IP address can be found in the peer's certificate, 
>    you can skip the test
>    
> => I maintain my proposal to change this into "if the specific IP address
> is already authorized, you can skip the test".
> This is more general (as there can be other ways to authorized an address)
> and more accurate (so it should answer Vijay's concern).

Agree on Francis on this. We do not need to specify how it is already
authorized. Certificate is one way, typed in to the configuration, or
authorized by the dnssec information are others.

Most of the cases where the IP-address is already authorized are the
cases where there is multihoming SGW so all IP-addresses are already
known when the machine is installed, but mobike is simply used because
of the multihoming aspect to select which of those IP-addresses are
used. 
-- 
[email protected]