Back to matrix

C02-HP: No

Rationale

The selected host-to-host ESP path retains outer IPv4/IPv6 source and destination locators. A first transit router can see the final host locator; HIP identity separation and encrypted payload do not hide that destination.

Assessment method

Documentary packet and dependency inventory; no traffic capture

Source context

Primary specifications and explicitly configured bootstrap/trust profiles

Outstanding qualification

No anonymity relay or destination-concealing tunnel is selected. This does not claim that every ESP data packet carries the explicit Host Identity.

Public sources

• https://www.rfc-editor.org/rfc/rfc7402.html#section-3.2
• https://www.rfc-editor.org/rfc/rfc4291.html
• https://www.rfc-editor.org/rfc/rfc4760.html

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.

• round262-sources.json