Re: [manet] Security drafts

["Teco Boot" <teco at inf-net.nl>]

>> It is all about trust. If the TC has traveled only trusted neighbors,
>> what is the problem?
>
>Is trust transitive? 

More thoughts on this, with TC in mind.
All nodes shall have synced LSDB, otherwise the network is loopy.
So all nodes shall accept or reject an invalid message.
So the neighbors of the node that corrupted the message shall
drop it on the floor. There is no olsr-sec draft yet, but I assume
such behavior written down.
Now we have some options what to do. Just drop the invalid messages?
Drop the whole packets? Invalidate the node that forwarded such 
messages, and tear down the links to such? Forever or hold-down 
period? Publish entries for revocation list?
I say the bad guy shall be isolated at least.

Now I see a benefit of signed messages. A node that is taken over
by the bad guys gang, and is transformed into an assassin, is to be 
isolated. Meanwhile, it can only cause some local damage.

Teco.