Subject: [pcp] pcp-base security considerations

From: Alper Yegin <[email-masked]>
Date: Wed, 30 Nov 2011 11:45:15 +0200

Few questions about the security considerations of pcp-base:

   A PCP Server is secure under this threat model if the PCP Server is
   constrained so that it does not configure any explicit mapping that
   it would not configure implicitly.  

Is there any document that can be referenced for the "security analysis of implicit mapping"? 

   In most cases, this means that
   PCP Servers running on NAT boxes or stateful firewalls that support
   the PEER Opcode can be secure under this threat model if all of their
   hosts are within a single administrative domain 

Can we really say that if, for example, we are talking about a home network (domain) or a WiFi hotspot (domain)?

Thanks.

Alper