Re: [Pana] status of wg documents

["Glen Zorn" <gwz at net-zen.net>]

Basavaraj.Patil at nokia.com [mailto:Basavaraj.Patil at nokia.com] writes:

...

> As I have said in an earlier email, I do not see IPsec essentially
> being
> used as a means to secure the access link (between the PaC and EP).
> Either
> the link technology itself has its own security mechanism or the client
> simply uses IPsec VPNs if security is desired. 

Fair enough, though you leave out what is by far the most popular option (in
the absence of a standard): none.  However, I'm much more interested in the
security of the PAA-EP link.  RFC 5191 says that 

   The protocol exchange between the PAA and EP for provisioning authorized
PaC information on the EP must be protected for authentication, integrity,
and replay protection.

but I can't find anything in any document that says how to do this.  What am
I missing?

...