Generated Address (CGA), or that was associated to a router Public-private key pair that was used to generate a Cryptographically RSA Signature option, which in turn requires possession of the Of ND messages, since the advertiser is required to generate a valid Only the node sending an ND message is the owner of the address from The original SEND specification has implicitly assumed that Originated by another node acting on behalf of the owner of theĪn NDP message issued by a Secure ND Proxy that is not the result Received NDP message originated by the owner of the address or Specification defined in this document for Secure Proxy NDĪn NDP message issued by a Secure ND Proxy as a result of a This document for Secure Proxy ND support but uses the SENDĪn IPv6 node that receives and validates messages according to the Specification but uses the ND protocol defined in andĪn IPv6 node that does not implement the specification defined in Private key related to the source address of the other node or theĪn IPv6 address that does not belong to the Secure ND Proxy andįor which the Secure ND Proxy is performing advertisements.Īn IPv6 node that does not implement the SEND Neighbor Discovery Protocol (NDP) message without knowing the Ī node acting on behalf of another node and authorized to secure a "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in thisĭocument are to be interpreted as described in. The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", From this point on, we refer to such an extension as This document extends the current SEND specification with support for Of a router's key cannot be secured using SEND. Possess knowledge of the address owner's private key and/or knowledge Means that the Proxy ND signaling performed by nodes that do not
Keys used to generate the digital signature on each message. Message is sent and/or possesses a key that authorizes the node toĪct as a router, so that it is in possession of the private key or Sending an ND message is the owner of the address from which the As defined today, SEND assumes that the node Securing Neighbor Discovery (ND) signaling against specific SEcure Neighbor Discovery (SEND) specifies a method for Backward Compatibility with Non-SEND Nodes. Backward Compatibility with RFC 3971 Nodes. Backward Compatibility with RFC 3971 Nodes and Non-SEND Nodes. Scenario 3: RFC 4389 Neighbor Discovery Proxy. The Trust Legal Provisions and are provided without warranty asġ.
ANYSEND KEY LICENSE
Include Simplified BSD License text as described in Section 4.e of
ANYSEND KEY CODE
Code Components extracted from this document must Please review these documentsĬarefully, as they describe your rights and restrictions with respect This document is subject to BCP 78 and the IETF Trust's Legal RFC 6496 Secure Proxy ND Support for SEND February 2012Ĭopyright (c) 2012 IETF Trust and the persons identified as the
ANYSEND KEY HOW TO
Information about the current status of this document, any errata,Īnd how to provide feedback on it may be obtained at Internet Standard see Section 2 of RFC 5741. NotĪll documents approved by the IESG are a candidate for any level of Publication by the Internet Engineering Steering Group (IESG). It has received public review and has been approved for It represents the consensus of the IETFĬommunity. This document is a product of the Internet Engineering This document defines an Experimental Protocol for the InternetĬommunity. Published for examination, experimental implementation, and
This document is not an Internet Standards Track specification it is Specification in order to secure Proxy ND operation. Signaling performed by nodes that do not possess knowledge of theĪddress owner's private key and/or knowledge of a router's key cannotīe secured using SEND. It is in possession of the private key or keys used to generate theĭigital signature on each message. Possesses a key that authorizes the node to act as a router, so that
The owner of the address from which the message is sent and/or
Asĭefined today, SEND assumes that the node sending an ND message is Neighbor Discovery (ND) signaling against specific threats. SEcure Neighbor Discovery (SEND) specifies a method for securing Secure Proxy ND Support for SEcure Neighbor Discovery (SEND) Internet Engineering Task Force (IETF) S. RFC 6496: Secure Proxy ND Support for SEcure Neighbor Discovery (SEND)
0 kommentar(er)
