Re: Unique identifiers and privacy

I am not sure if this is the right mailing list for this discussion,
but I thought I should respond to Pekka's mail.

Pekka Nikander wrote:

> For route optimisation, it is not encrypted, as IPsec is typically
> not used in the RO case.  

you can use it if you want to.

IPv6 hdr (MN_CoA, dst=CN)
ESP hdr
IPv6 hdr (MN_HoA, dst=CN)
Payload

you just need sufficient trust to run IPsec with the CN.

> If IPsec is used with RO, I don't remember
> what the specs say, but that doesn't currently matter much since
> IPsec cannot really be used with RO until MOBIKE WG produces its
> results.

why? MIP signaling can be used to update the tunnel end points.

Vijay