Subject: [TICTOC] IPsec security for packet based synchronization

From: Danny Mayer <[email-masked]>
Date: Sun, 25 Dec 2011 22:10:55 -0500

The minutes of the taipei meeting state this:
> 6.   IPsec security for packet based synchronization
> Yang Cui on behalf of the author, Yixian Xu, presented 
> draft-xu-tictoc-ipsec-security-for-synchronization-02.  This draft has had a 
> large volume of discussion on list .  There have been two basic questions that 
> have been brought up on the list: Do we need to encrypt timing packets?  Do 
> we need to identify and decrypt timing packets right away (before decrypting 
> all traffic)?  Yang indicated that the answer to question 1 is yes for 3GPPP 
> Femtocell and that the draft provided the only efficient mechanism for 
> carrying out a solution to the second question.  It had been brought up on the 
> list that if timing packets were easily identified then they were more susceptible
> to attackers, for which Yang disagreed.   The authors a preparing a new version of 
> the draft which addresses the points discussed on the list.

If the answer to question 1 is yes for 3GPP Femtocell then there needs
to be an explicit answer to why and what this is with a reference to
supporting documents and the section of the documents.

Also Yang disagreed about the vunerability of identified timing packets
so he should state exactly why he disagrees along with any supporting
documents and sections of those documents.

Danny