Back to matrix

C04-LI: No

Rationale

The selected public-format Map-Request/Map-Reply and RLOC-probing exchanges are not preceded by a secret-gated camouflage mechanism. Map-Register authentication protects updates, not indistinguishability of the exposed LISP control service. Neither endpoint access filtering nor LISP-SEC is selected as an anti-identification mechanism.

Assessment method

Specification review; unchanged selected profile

Source context

rfc9301.html#section-5.3; rfc9301.html

Outstanding qualification

No active scan or timing test was performed. Administrative firewalls could suppress exposure but are not a native anti-identification mechanism in this selected composition.

Public sources