Revised ID draft-ietf-seamoby-card-protocol-07.txt

A revised version of the Seamoby CARD draft,
draft-ietf-seamoby-card-protocol-07.txt, has been submitted to the Internet
Drafts editor and should appear in the Internet Drafts repository shortly.
The draft is currently in state IESG Evaluation :: Revised ID Needed, this
draft is intended to be the revised ID to advance the draft, as per
Allison's comments in 2004-03-30(mankin).

The draft addresses the outstanding Discuss comments from the first review
by IESG members in the following ways:

2004-02-18(hardie), 2004-02-19(narten) - The ICMP type and SCTP port are now
shared between CARD and CTP (these are additionally available to other
experimental mobility protocols, such as FMIP), reducing the pressure on
scarce ICMP type and UDP port resources. The IANA allocations for the
Seamboy protocols are addressed in a separate draft
(draft-ietf-seamoby-iana-02.txt).

2004-02-18(bellovin), 2004-02-18(rhousley) - The Security Considerations
section has been extensively rewritten to use the SEND router certificates
and signature on CARD Reply messages, so that the mobile node can verify
that CARD Replies come from a certified access router. The requirement for
encryption on the mobile node to router link was dropped, since the
information is of an advertisement nature, and confidentiality is not
required. Both encryption and confidentiality are required on the
inter-router link, and the draft requires IKE to be used for key exchange,
and IPsec ESP with authentication and encryption transforms on the
inter-router link. The draft additionally adds support to CARD for the
mobile node to obtain a certificate chain from the access router, since IPv4
currently has no support for SEND-style certificate chains, and also to
preprovision the mobile node with a certificate chain from candidate access
routers, to speed handover security on the new router.

2004-03-30(mankin) - Allison additionally raised an issue with congestion
control on both the inter-router link and mobile node to access router link.
The draft has been rewritten to require exponential backoff on the mobile
node to access router link where ICMP is used, and to use a shared SCTP port
(with CTP) on the inter-router link.

The draft is now ready for publication as an Experimental RFC.

            jak