Subject: RE: SEND with link-layer security

From: Soliman Hesham <[email-masked]>
Date: Fri, 21 Nov 2003 06:23:20 -0500

> 2. Is everyone still comfortable with the fact that no
 >     one is doing the L2-L3 cross check?

=> Although this is probably not as bad as the 
reverse case (someone steals another node's address)
it still allows an attacker to flood another node
onlink. I don't think it's increadibly significant
but are there implementations out there that cannot 
acquire the sender's MAC address from their link layer
(802.anything) driver? 
In any case this seems like an optimisation that can
be done on a per implementation basis, so I'm wondering
whether we should say that SEND does not allow for the
L2-L3 cross check because I don't see an inherent obstacle
in SEND here, just implementation issues local to the IP
stack and the driver. 

Hesham
****************************************************************************
*******************************************
This email may contain confidential and privileged material for the sole use
of the intended recipient.
Any review or distribution by others is strictly prohibited.  If you are not
the intended recipient please
contact the sender and delete all copies.
****************************************************************************
*******************************************

--------------------------------------------------------------------
To unsubscribe from this list, send email with "UNSUBSCRIBE" in the
body to <[email-masked]>.
Archive: http://standards.ericsson.net/lists/ietf-send/maillist.html
--------------------------------------------------------------------