Subject: [RPSEC] Multicast Security

From: "Vishwas Manral" <[email-masked]>
Date: Tue, 16 Aug 2005 22:22:12 -0700

Hi,

Now that we are discussing issues in protocols, I had another doubt.

Should we consider a case where all the members of a multicast group do
not trust one another? I mean when using manual keying, the way it is
done right now is that any member on a multicast (broadcast) domain (for
IS-IS the flooding domain is much bigger) could pose as someone else and
there is no way to know the identity of the sender.

Do you think such attacks need to be documented too? The decision to
solve or not solve such a problem is a different matter altogether
(certificates etc.).

Thanks,

Vishwas

_______________________________________________
RPSEC mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/rpsec