Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

doc: update NAT address discovery design document #4659

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

doc: update NAT address discovery design document #4659

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
219dd85
update NAT Address Discovery design document
Dec 2, 2024
35385e7
update NAT Address Discovery design document
Dec 4, 2024
1476173
update design document
Dec 11, 2024
2755a60
update design document
Dec 23, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
update NAT Address Discovery design document
  • Loading branch information
Jan Luan committed Dec 4, 2024
commit 35385e74cb96fa00958d388b9cd3d0613bb4b281
6 changes: 2 additions & 4 deletions doc/dev/design/NAT-address-discovery.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -141,10 +141,8 @@ Overall, the threat model is similar to the question about whether we need authe

Decision
--------
During the open-source contributors meeting on Nov. 19, 2024, it was agreed that the STUN/UDP/IP solution is preferred
due to its simplicity. However, arguments about message integrity/authentication have not yet been discussed at that time.
It remains to be discussed whether these arguments pose enough reason to changed the preferred solution in favor of the
STUN/SCION/UDP/IP variant.
After discussion with the open-source contributors, it was decided that the STUN/UDP/IP solution is preferred, since it is the standard approach.
It was agreed that message authentication would not yield any significant benefits in terms of security.

Rationale
=========
Expand Down
Loading