Re: compare-jfk-sigma.txt

["Angelos D. Keromytis" <angelos@cs.columbia.edu>]

In message <15378.38155.49527.8799@ryijy.hel.fi.ssh.com>, Tero Kivinen writes:
>
>Actually it really does not matter which ends identity is protected
>against active attacks unless we disallow changing of the direction of
>the negotiation.

This is something that the implementation can do; on detecting an incoming
Message 1 from a peer with whom I already have an SA or with whom I'm willing
to establish an SA, I simply start a JFK exchange myself. It's simple enough
to detect cases where both parties are not willing to reveal their identities
(and avoid a Message-1-war).
-Angelos

---

References:

• Re: compare-jfk-sigma.txt
• From: Tero Kivinen <kivinen@ssh.fi>

---

• Prev by Date: Re: Interoperability issues in setting up SAs
• Next by Date: Re: compare-jfk-sigma.txt
• Prev by thread: Re: compare-jfk-sigma.txt
• Next by thread: Re: compare-jfk-sigma.txt
• Index(es):
  • Main
  • Thread