Back to matrix

C06-SC: No

Rationale

The SCION address header explicitly carries source and destination ISD-AS values and host addresses. The selected UDP underlay and SCION data path do not encrypt that header, so a transit observer can identify the final address pair despite per-hop path authentication.

Assessment method

Header/encapsulation assessment under revised C06; no traffic capture

Source context

Primary RFCs and pinned protocol/implementation headers

Outstanding qualification

The outer underlay may identify adjacent routers, but the inner SCION address header still exposes final addresses. Distinct flow/address contexts between sessions do not meet the revised within-communication association criterion. No anonymity extension is selected; path authenticity is not endpoint-pair confidentiality.

Public sources

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.