Re: Node Requirements: Issue 13 - CGA/SeND support

[Hesham Soliman <hesham at elevatemobile.com>]

On 24/07/09 11:52 PM, "Arnaud Ebalard" <arno at natisbad.org> wrote:

> Hi Hesham,
> 
> Hesham Soliman <hesham at elevatemobile.com> writes:
> 
>>> 
>>> SeND is theoretically not easy to deploy - you need to provision
>>> 
>>> cryptography material on all nodes.
>> 
>> => Why? You only need to provision routers if you want them to support proof
>> of prefix ownership, but you certainly don't need to provision all nodes,
>> that's the advantage of CGAs.
> 
> What's the point of SEND *for authenticating routers*

=> SeND is not only for authenticating routers, in fact that particular
function was done last. It's about address ownership, which couldn't be done
without CGAs. 


  if you use only
> CGA and not certificates? And if you use certificates, then nodes need
> to be provided with trust anchors. Or am I missing your point?

=> I think so, you don't need to provision hosts with anything to allow them
to prove that they own an address. That's the whole point of CGAs. Prefixes
are a different story of course.

Hesham


> 
> Cheers,
> 
> a+