Subject: RE: [mobile-ip] RE: Is RR only enough ?

From: "Hesham Soliman (ERA)" <[email-masked]>
Date: Fri, 18 Jan 2002 10:43:41 +0100

=> Could you show a non-DoS-based scenario, in which
the MITM can hijack a connection protected by ESP?

  > 
  > It seems that as long as the attacker is anywhere on the CN-HA path,
  > there is no new vulnerability being introduced by RR based 
  > Mobile IP BU
  > authorization. 

=> Yes.

The benchmark case should be the "MN on it's 
  > home link"
  > (Mobile IP would not be used),  where all the traffic 
  > between MN and the
  > CN would be visible to the same attacker. 
  > 
  > So what is the major difference?

=> I don't understand your point. you're disagreeing
that connection hijacking by MITM can be prottected
by e2e security ? If so please give an example with
ESP being used e2e.

Note, I'm excluding DoS-based attacks.

Hesham
  > 	Jarno