[Pana] Re: review pana spec

[Mohan Parthasarathy <mohanp at sbcglobal.net>]

Hi Yoshi,

the draft looks pretty good. I mainly went through the differences. Here are my comments. 

- Abstract calls it "link-layer" agnostic where as in the Introduction, there is
  "minimum" link-layer dependency. Having gone through this discussion many
  times it might be better to remove both these terms to avoid lengthy discussions :-)

-Why isn't Key-Id included in the PANA-AUTH-KEY ? If you have multiple MSKs, isn't there
  multiple PANA SAs and hence the Key-Id should be included ?

-Section 5.6 " Pac Updating its IP addresses" : Is this needed for basic operation of PANA ?
 The example given in the section makes me believe that it is not required. But it is required
 depending on what IP address you start with. Hence, some clarification is required.

-In the Security considerations, 
   11.8.  IP Address Spoofing

            There is no way to prove the ownership of the IP address presented by
            the PaC.  Hence an authorized PaC can launch a redirect attack by
            spoofing a victim's IP address.

  the first sentence is worded in such a way that there is no way to do it. But if SEND
  is deployed in access networks, then it should be possible. Sure, PANA by itself
  cannot do it.



-mohan








> -----Original Message-----
> From: Yoshihiro Ohba [mailto:yohba at tari.toshiba.com]
> Sent: Sunday, November 19, 2006 10:39 AM
> To: pana at ietf.org
> Subject: [Pana] Preliminary pana-pana draft (13a)
> 
> is available at:
> 
> http://www.panasec.org/docs/editing/pana-spec.html
> 
> (Now we get 17 pages reduction.)
> 
> Please do sanity check to make sure that all resolutions discussed in
> IETF67 and over mailing list are reflected appropriately.  Diff from
> revision 12 is also available.
> 
> As soon as sanity check is done, I will submit a new revision (13)
> which is to be used for IETF last call.
> 
> Regards,
> Yoshihiro Ohba
> 
> _______________________________________________
> Pana mailing list
> Pana at ietf.org
> https://www1.ietf.org/mailman/listinfo/pana





_______________________________________________
Pana mailing list
Pana at ietf.org
https://www1.ietf.org/mailman/listinfo/pana