On Wed, 30 Oct 2002, Keith Moore wrote:

> > I would also ask all those who want to kill SLs turn your support to
> > Margaret to put the controls on.
> 
> Yes, this is the position I support.

As is mine.

[...]
> Finally I think we need to discourage the idea that SLs are a security
> mechanism, because SL filters are at best only marginally better than
> other kinds of address filters (and I'm being charitable there).

And I'm being uncharitable: they give a false sense of security.

Sure, you can make them work securely, but that's a lot of work.

A bit like "privacy addresses" today.

-- 
Pekka Savola                 "Tell me of difficulties surmounted,
Netcore Oy                   not those you stumble over and fall"
Systems. Networks. Security.  -- Robert Jordan: A Crown of Swords

--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to