Re: issues 18, 15, 6 -- return routability

James Kempf wrote:

>How about CGA?
>  
>
CGA helps most with the ownership problem, but we don't
have that issue here since we have shared key material between
the peers, using that will suffice to show we are talking to the
right node.

However, CGA doesn't go all the way towards
ensuring that the peer at the other end is trusted and doesn't
redirect his streams somewhere else. It helps a little, however,
since its hard to spoof someone else's address; but you can
still spoof and bomb a victim network.

Combined with some credit-based monitoring against flooding
attacks you could probably get a very good solution with CGA.
But I'm hoping we can do without it this WG, we are basically
just doing a simple RR test, guided by some policy of when
that is necessasary.

--Jari