Re: Peer address update and DPD

[Francis Dupont <Francis.Dupont@enst-bretagne.fr>]

 In your previous mail you wrote:

           I saw in one of the recent emails that, DPD is should be
  used to check the existence of new updated address by the receiver,
  before start using this. May somebody give the reasoning for checking
  the liveness of the address.

=> easy: this is a return routability check: a request is sent to
the peer at its new address and when the response comes back one knows
the peer is able to receive messages sent to this address. This is not
high security but you catch attackers using random fake addresses (note:
attackers knowing the keys negociated in phase one, i.e., this is more
an issue about the trust one puts on its peer than other thing.

Regards

Francis.Dupont@enst-bretagne.fr