Hi all,

Thank you all for the feedback on the group communication security discussion.

We noticed that two concerns have been raised with the current specification.
1)   Symmetric keys do not provide source authentication. Here, most people on 
the mailing list agreed that symmetric keys provides basic security and is 
sufficient for lighting applications. It is not intended to be used in the 
wider internet for more sensitive group communication security use-cases.
2)   How to ensure that the symmetric key group communication security solution 
is not used in situations it is not designed for?

We propose to address the received feedback by making the following 
modifications to the document:

1)   We will add an additional section where we specify how asymmetric 
cryptography can be used for secure group communication. This will help for all 
those cases where source authentication is desired.
2)   Add a security considerations section where we explain that the asymmetric 
key solution is the recommended approach but that there are situations where 
low latency group communication makes it difficult to use asymmetric 
cryptography and where source authentication is less important. You could call 
it an applicability statement.

If this proposed modifications makes sense then we can try to submit a new 
draft with these changes.

Abhinav
________________________________________________________ The contents of this 
e-mail and any attachments are confidential to the intended recipient. They may 
not be disclosed to or used by or copied in any way by anyone other than the 
intended recipient. If this e-mail is received in error, please immediately 
notify the sender and delete the e-mail and attached documents. Please note 
that neither the sender nor the sender's company accept any responsibility for 
viruses and it is your responsibility to scan or otherwise check this e-mail 
and any attachments.

_______________________________________________
Ace mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ace

Reply via email to