Back to matrix

F26-HP: No

Rationale

The selected HIP/ESP composition authenticates endpoint associations and protects endpoint packet processing. Its IP transit routers do not evaluate HIP puzzles, host identity policy or ESP admission before using their onward links. Thus its endpoint defenses do not provide the selected-profile transit authorization required by F26.

Assessment method

Primary source admission ordering and selected-role comparison; no execution

Source context

RFC 7401 host-association scope and RFC 7402 ESP composition; selected profile

Outstanding qualification

No concerns the declared host-to-host composition, not HIP deployments with added gateways or filtering infrastructure. F15-HIP remains Yes: setup-work protection is a separate benefit. A packet can be rejected at the HIP endpoint after consuming intervening IP links.

Public sources

• https://www.rfc-editor.org/rfc/rfc7401.html
• https://www.rfc-editor.org/rfc/rfc7402.html

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.

• round445-sources.json
• round448.html
• round448-sources.json