[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[anonsec] Propose dropping asymmetric CBB



>>>>> "Joe" == Joe Touch <touch at ISI.EDU> writes:

    Joe> Should it be included as a variant for completeness, but the
    Joe> lack of currently known utility / motivation noted?

No, because I think it has security problems and I don't want to spend
the effort doing analysis unless we have a justification for that
work.



Let me make sure I understand what you mean though.  You consider this
the case where one side verifies the channel binding but the other
side does not, not the case where you use channel bindings but one
side has full IKE, right?



Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.