Re: Key Identification RE: [LinkSec] Requirements
Paul:
> >The only
> > possible identifier for the key that can be used at this level are MAC
> > addresses, unless of course someone wants to invent a new 802
> > architecture.
>
>Yes ... the MAC address is very useful for identifing a key, although a
>keyID, SAID, or SPI mechanism could also be used. Using a MAC address to
>identify an association/key is not the same as authenticating the MAC address.
Security Association Identifiers (SAIDs) are useful. However, they ought to
be transient. I envision the MAC address as the identifier for the layer 2
participant in the security protocol. This is more static than an SAID.
Russ