RFC4081 - Security Threats for Next Steps in Signaling (NSIS)

      To illustrate this, in roaming environments, it is difficult to
      assume the existence of a pre-established security association
      directly available for NSIS peers involved in first-peer
      communications, because these peers cannot be assumed to have any
      pre-existing relationship with each other.  In contrast, in
      enterprise networks usually there is a fairly strong
      (pre-established) trust relationship between the peers.
      Enterprise network administrators usually have some degree of
      freedom to select the appropriate security protection and to
      enforce it.  The choice of selecting a security mechanism is
      therefore often influenced by the infrastructure already
      available, and per-session negotiation of security mechanisms is
      often not required (although, in contrast, it is required in a
      roaming environment).

      Last-Peer communication is a variation of First-Peer communication
      in which the roles are reversed.

   Intra-Domain Communication:

      After verification of the NSIS signaling message at the border of
      an administrative domain, an NSIS signaling message traverses the
      network within the same administrative domain to which the first
      peer belongs.  It might not be necessary to repeat the
      authorization procedure of the NSIS initiator again at every NSIS
      node within this domain.  Key management within the administrative

上一页 [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22] [23] [24] [25] [26] [27] [28] [29] [30] [31] [32] [33] [34] [35] [36] [37] [38] 下一页

复制本页网址和标题，发送给你QQ/Msn的好友一起分享

上一篇:RFC4085 - Embedding Globally-Routable Internet Addresses Considered Harmful

下一篇:RFC4103 - RTP Payload for Text Conversation