Subject: [multimob] Re: [Int-area] SeND & CGA Extensions BOF

From: Behcet Sarikaya <[email-masked]>
Date: Fri, 8 Jun 2007 12:31:14 -0700 (PDT)

Hi Brian, Julien,

----- Original Message ----
From: Brian Haberman <[email-masked]>
To: Julien Laganier <[email-masked]>
Cc: INT Area <[email-masked]>; [email-masked]
Sent: Friday, June 8, 2007 9:13:50 AM
Subject: Re: [Int-area] SeND & CGA Extensions BOF

Hi Julien,

Julien Laganier wrote:
> Hi Marcelo, others,
> 
> How about including work on extensions to secure 
> Multicast Listener Discovery Version 2 (MLDv2) for 
> IPv6, along the same lines that what was done to 
> secure Neighbor Discovery:
> 
> 1. protection against spoofing of multicast listener 
> report messages in which a rogue node unsubscribe its 
> target from receiving multicast traffic.

This type of attack is mitigated by the MLD state machine.  When a
router receives a Report that signals no more interest in a particular
group it first sends out a group-specific query to ensure that interest
does not exist.  When that query is sent, the target node will respond
that it is still interested.

> 
> 2. protection against spoofing of multicast Listener 
> query messages in which a rogue node with a lower IPv6 
> address than the current querier will cause querier 
> duties to be assigned to the rogue node.  

This would be useful in my opinion.

Regards,
Brian

[behcet] I think these (or this) issues need better be handled in multicast related WG in int area, magma is one. We recently started multimob mailing list (cc'ed), if the above issue is likely to arise in mobile environments, multimob could also be considered.

Regards,

Behcet

_______________________________________________
Int-area mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/int-area

_______________________________________________
multimob mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/multimob