Technical Summary
This memo specifies LISP-SEC, a set of security mechanisms that
provides origin authentication, integrity, and anti-replay protection
to LISP's EID-to-RLOC mapping data conveyed via the mapping lookup
process. LISP-SEC also enables verification of authorization on EID-
prefix claims in Map-Reply messages.
Working Group Summary
Was there anything in the WG process that is worth noting?
For example, was there controversy about particular points
or were there decisions where the consensus was
particularly rough?
Document Quality
The document has been around since 2011. There was strong
from the start because the WG felt that the having a mechanism
to protect the map lookup process is important in order to
make possible public deployments.
The security review of the base LISP specifications (rfc6830bis
and rfc6833bis) concluded that for LISP public deployments
LISP-SEC is required.
Personnel
Document Shepherd: Luigi Iannone
Responsible Area Director: Alvaro Retana