Subject: [dhcwg] Review Request for two updated drafts

From: Cui Yang <[email-masked]>
Date: Fri, 23 Sep 2011 03:24:07 +0000

Dear All,

According to the advices received in last meeting, we revised and updated two following drafts in DHC.

1. http://tools.ietf.org/id/draft-bi-dhc-sec-option-00.txt 
The security option document draft-bi-dhc-opextensions-00.txt has been updated to draft-bi-dhc-sec-option-00.txt, only the new defined security option is included in, other options have been removed from this document. 

This new option aggregates most of the security configuration in one option, which benefits to host configuration for DHCP clients with different security policies. It helps solve the vendor-specific options problem, otherwise the server must support a large number of vendor-specific configurations, which increases the possibility of incompatibility and wastes resources.

2. http://tools.ietf.org/id/draft-xu-dhc-cadhcp-01.txt 
Revised version clarifies the motivation to employ the certificate based solutions, and also removes some incorrect descriptions.

This document proposes a certificate based authentication method, compared to the conventional delay authentication mechanism [RFC3118] which is typically based on pre-shared key crypto. The goal of this specification is to define methods based certificate to protect the integrity of DHCP message and stop the gaps of the existing delay authentication mechanism.

Any comments are welcome.
Thanks!

Best Regards,
--
  Yang Cui
  Huawei Technologies
  [email-masked]