[Mip4] Authentication Mandate for All Registration Reply Messages
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Mip4] Authentication Mandate for All Registration Reply Messages



Hello folks,

I've written up a new Internet Draft for submission next week.

Here is the abstract.
   Some implementations of Mobile IP home agents have been observed to
   supply zero authentication data when sending a Registration Reply to
   the mobile node that contains rejection code 131 (Mobile Node Failed
   Authentication).  This creates a vulnerability whereby a mobile node
   could be denied service from its home agent, and thus lose
   connectivity to the Internet even though mobile node and home agent
   were otherwise functioning properly.

If possible, I would like to have a slot at the
upcoming IETF to discuss this matter.  It would
be a short presentation.

Regards,
Charlie P.


Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.