<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>
<div style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<span style="font-size: medium;">In the case of CCN 1.x (probably does not apply to NDN) here is what you can expect:</span></div>
<div style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<span style="font-size: medium;"><br>
</span></div>
<ul>
<li><font face="Verdana,sans-serif">The forwarding path of CCN 1.x does not check signatures. (There might be a firewall that might check signatures, but in regular operation the forwarding path will not check them). </font></li><li>If an interest has a KeyID restriction the forwarding path will check that the KeyID field in the content object matches that of the interest.</li><li>Caches/ContentStores WILL check the signature if an interest has a KeyID restriction. In this case, if the signature does not verify the caches are not allowed to reply. This is important to prevent attack amplification.</li><li>Caches/ContentStores may not check the signature if the interest does not include a KeyID restriction.</li><li>The forwarding path and Caches/ContentStores will check the content object hash if the Interest has a con ten object hash restriction. This hash is over the Content Object completely, this includes the signature. So if an interest includes this restriction
it must match the correct hash (potentially with the incorrect signature?).</li></ul>
<div>As Nick stated you can sign content with the key of the proxy. This might be a good solution given that it’s the proxy who is generating the content objects. One obvious approach is to encapsulate either CCN/NDN in PURSUIT or the other way around. In
either of these cases you are really just doing a tunnel and not a conversion.</div>
<div style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<span style="font-size: medium;"><br>
</span></div>
<div style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<span style="font-size: medium;"><br>
</span></div>
<div style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<span style="font-size: medium;">Nacho</span></div>
<div style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<span style="font-size: medium;"><br>
</span></div>
<div style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<div><span class="Apple-style-span" style="font-size: 12px;"><font face="Courier">--</font></span></div>
<div><span class="Apple-style-span" style="font-size: 12px;"><font face="Courier">
<div>Nacho (Ignacio) Solis</div>
<div>Senior Research Scientist</div>
<div>Palo Alto Research Center (PARC)</div>
<div>+1(650)812-4458</div>
<div>Ignacio.Solis@parc.com</div>
</font></span></div>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Verdana, sans-serif; font-size: 16px;">
<div>
<div>On 3/13/14, 9:03 AM, "Kelvin Leung" <<a href="mailto:kelvin_liang@outlook.com">kelvin_liang@outlook.com</a>> wrote:</div>
</div>
<div><br>
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>
<div class="hmmessage">
<div dir="ltr">
<div dir="ltr"><style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr"><font size="3">Dear all,<br>
<br>
Our team is now deploying 2 different ICNs (i.e., NDN & PURSUIT) over SDN which is designed for communications between these two ICN protocols.
<br>
<br>
But now we encounter a problem that we cannot TRANSFER the content data from PURSUIT to NDN because of the strict signature verification. So I wonder is it possible that NDN skips the verification step while still receiving the content ? I know that it is a
dangerous design without considering the security issues but we want to build up a prototype first and it is supposed to combine the security scheme into it in a long term.<br>
<br>
</font>
<div><font size="3">Thanks & Regards,<br>
<br>
</font><font size="3"></font></div>
<font size="3">Kelvin Leung</font><br>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</span>
</body>
</html>