Subject: [dtn] BPSEC Request: Removal of Security Destinations

From: "Birrane, Edward J." <[email-masked]>
Date: Thu, 21 Jan 2016 20:43:25 +0000

All,

  At the January telecom, we agreed that security destinations can be removed from BPSEC blocks (BIB, BCB, CMSB - and BAB, but we are trying to remove BAB). 

  In the BPSEC spec, a security destination is restricted to being either the bundle destination or the current BPA (for BABs, but we are trying to remove BABs). There really isn't much use in carrying that.

  We propose that the combination of [security source, security operation, target block] is sufficient to allow individual nodes (waypoints and destinations) to determine whether they should be processing the security operation or not. As such, there is no need to assert a security destination in the blocks themselves and, in fact, doing so may get in the way of a more expressive security policy.

ACTION:

  Please comment if there is an issue with removing the security destination from the BPSEC specification.

-Ed

---
Edward J. Birrane, III, Ph.D.
Embedded Applications Group Supervisor
Space Exploration Sector
Johns Hopkins Applied Physics Laboratory
(W) 443-778-7423 / (F) 443-228-3839