Issues in candidate access router discovery for seamless IP-level handoffs
draft-ietf-seamoby-cardiscovery-issues-04

New text was sent by SMB 9/23, which I sent to the
chairs, for them to send to the WG.

SMB:
I've reread it.  The Security Considerations section should include something like the following:

--

Information about the capabilities of a CAR often needs to be digitally signed.  Otherwise, intentional or accidental APs can capture traffic, to the detriment of the MN.  Such captures can result in black holes, and/or can facilitate eavesdropping and active attacks.  (Attacks like these have already occurred on 802.11 networks.)

The need for digital signatures can cause other problems.  MNs MUST be preprovisioned with information that lets them ascertain the authorization of any CAR.  Digital signatures are expensive to compute
and verify; this can translate into increased computational load on the CARs and on the MNs, and increased power consumption on the MNs.

State Changes to New Version Needed (WG/Author)                    from Expert Review                                    by Allison Mankin

State Changes to Request Rejected                                  from Requested                                        by Allison Mankin