[LinkSec] http://www.ieee802.org/linksec/Meetings/Jan03/Seaman_1_0103.pdf
I have a few comments on Mick's paper.
Why link layer? on page 2. There is another reason. Not all networks run
IP. Layer 2 offers a way to secure these other protocol suites without
resorting to tunneling.
Additional threats on page 4. In this section, you do not explain your
reason for discarding a large collection of threats. Most of them are
pretty obvious, but I do not think that the reason for omitting replay is
obvious. In this scenario, the human user is a guest with a laptop
connecting to the host's LAN. Is the reason that you omit replay that a
LAN provides a connectionless service? If not, please explain.
Russ