[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Routing Header info of IPng against traffic analysis?
Reto Haeni writes:
> As I was working through the IPng specifications, I realized that
> no options are implemented to prevent traffic analysis in IPsec.
>
> Could the Routing Header information been set up that the list of
> intermediate nodes changes when the system setting provide a
> list of alternative routing paths? An error condition could arise
> similar to the definition in the fragmentation header, if not all
> packets are received to complete reassembly of the message within 60
> seconds (a long time but I think this would be a reasonable waiting
> time if you are concerned about traffic analysis).
Changing routing paths isn't sufficient to prevent traffic analysis.
Stopping traffic analysis is fairly complicated and beyond the scope
of the IPSec work...
.pm
Follow-Ups:
References: