Thread Links Date Links
Thread Prev Thread Next Thread Index Date Prev Date Next Date Index

MAC address auth NOT -> was, RE: [LinkSec] Requirements





> Paul:
> 
> At this layer, the MAC address is the identity that should be 
> authenticated.  An authorization decision may require 
> authentication of a 
> higher-layer identity.
> 

No.  For unicast, pair-wise keys provide adiquate identification of the end-point.  For group keys (assuming nothing fancy like signatures per packet), the granularity is just to the multicast group.  MAC address identificaqtion is not useful or required and can be limiting.  It's only handy becaue it's usually unique.

>