Re: Draft multi6 minutes
Brian E Carpenter <[email protected]> Wed, 01 Dec 2004 11:56:28 +0100
| Newsgroups | gmane.ietf.multi6 |
|---|---|
| Organization | IBM |
| Message-ID | <[email protected]> |
Erik Nordmark wrote:
> Tim Shepard wrote:
...
>> If security is not needed, then perhaps we don't even need to use the
>> HBA scheme. If security is needed, then perhaps this scheme isn't
>> much better than using some public key cryptography.
>
>
> We know that security is needed. full stop.
Also, whether HBA is better or worse than PK crypto isn't quite the
point for me (chair hat off). As long as HBA is strong enough, the
fact that it doesn't require any kind of PKI is an enormous benefit.
Multihoming needs to work between any arbitrary pair of hosts, and doing
that without PKI is an enormous win.
Brian