Subject: RE: [Mip6] Preconfigured Kbm as working group document

From: [email-masked]
Date: Fri, 12 Mar 2004 13:36:46 -0600

> 
> Charles E. Perkins wrote:
> > Hello Pekka,
> > 
> > 
> > Pekka Nikander wrote:
> > 
> > 
> >>Hence, I still call for a stronger applicability statement
> >>and a stronger security considerations sections. 
> > 
> > 
> > I would be quite happy to add the stronger statements,
> > and I would be even happier if you would supply the
> > text that would do the trick.  Making these things
> > clear was the intention of the text I already put in
> > there, but if more text is needed then let's make it
> > happen.
> 
> Some thoughts below, hope this helps:
> 
> I think the difference is between a closed, trusted group
> of users such as the employees of my department vs. a large
> set of known but not necessarily trusted users. As an example
> of the latter, if a major CDMA 2000 operator decided to switch
> to MIPv6 RO with preconfigured Kbms for a zillion subscribers,
> we might get problems. Yes, you could track the subscribers
> down (at least if they are not prepaid), but that would be
> generally too late and would not help if their machines were
> compromised due to a virus, for instance.
> 
> So I think this is more about "trust" than about being "under
> the same administration" as you currently mention in the I-D.
> Perhaps you could say "under the same administration and trusted",
> and then adding some text that warns how subscribers of an
> operator generally cannot be trusted this way.
> 
> --Jari
> 

I agree that it should be made clear in the I-D that this solution
is primarily applicable to small "closed user groups" type of 
scenarios. People should not necessarily extrapolate the closed user
group to include a large enterprise (thousands of people for eg.) or
as Jari mentions all the users within the administrative domain of
a single operator.

I guess I should ask for WG consensus on the I-D in a separate email
in order to ensure more people are paying attention.

-Basavaraj

_______________________________________________
Mip6 mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/mip6

---

From: "Christian Vogt" <[email-masked]>
Date: Mon, 15 Mar 2004 16:07:25 +0100

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_______________________________________________Mip6 mailing [email-masked]://www.ietf.org/mailman/listinfo/mip6