Back to matrix

C04-IL: No

Rationale

The selected nonce protocol deliberately advertises ILNP mode during initial session establishment. A new correspondent need not possess a pre-shared credential before attempting that exchange. Validation of an existing session nonce protects against off-path injection; it does not provide protocol camouflage against an uncredentialed initiator.

Assessment method

Specification review; unchanged selected profile

Source context

rfc6744.html#section-5.2; rfc6744.html#section-6

Outstanding qualification

No live probing was performed. This is a selected-protocol design conclusion, not a claim that every packet necessarily receives a response.

Public sources