Bob Hinden wrote:

This was discussed extensively in the working group. The argument is that SEND doesn't support proxies that

I remember this discussion.

are allowed by ND. This is discussed fairly extensively in the security considerations section.

I recently reviewed this document again, and found out that the
non-requirements section does not mention SEND support at all
(even if it talks about IPsec support for ND). It also seems that
the security considerations text should be revised and make a
clearer explanation of the limitations, as well as what the
SEND "mixed mode" implications are.

These problems could be fixed, of course, and I have sent e-mail
to the authors with suggested new text.

However, I wouldn't object to a stronger mention that it doesn't mix with SEND.

I think this is what is needed as a minimum. We might also
consider what James suggested (perhaps as another work
item, not tightly integrated with this draft).

--Jari


_______________________________________________
Int-area mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/int-area

Reply via email to