On Wed, May 21, 2014 at 12:59:29AM +0530, Krishnathiepan Rasanayagam wrote:
hello, layer below does it mean layer 2?
Layer above and layer below does not always map to ISO OSI 7 layer model. BATMAN is a layer two mesh, and it runs on top of a L2 network. See what i mean?
Are you interested in transitive trust, or end to end trust of BATMAN peers? If transitive trust is sufficient, then you can do it at L2, trust the one hop neighbors. However if you want end-to-end trust of the mesh, you need to be inside the mesh, so inside BATMAN. If you want end-to-end application trust, you need to be inside the application, L7, or maybe L4 if you use TLS.
It comes down the basic security questions you should always be considering:
What are your assets you need to protect. Who are the attackers. What compromises are you willing to take.
First figure out your security model, then figure out how to implement it.
Andrew