>  1) Deprecate all usage of RH0
>  2) Recommend that RH0 support be off by default in hosts and routers
>  3) Recommend that RH0 support be off by default in hosts
>  4) Limit it's usage to one RH0 per IPv6 packet and limit the number
> of addresses in one RH0.

My preference is 2 or alternatively 1. I am currently not
aware of any real use case for Type 0 header (but please
educate me if there is some). It has been known to be
dangerous for a long time and without a use case, it
seems waste of energy to work on 4 or other more
detailed limitations to make it safe. In particular
I would very much like to see us publishing the
RFC deprecating/turning this off soon. Developing the
rules for 4 is possible, but it will take time.

More fundamentally, I believe functions like this
need to be tailored to a specific need before they
can be made restricted enough to be safe and
useful at the same. This is what was done with
Type 2, for instance. If we will see a future need
for something like this, I suspect that it may need
a new Type number anyway.

Alternative 3 is an interesting one. It would actually
align IPv6 with current IPv4 specifications. RFC 1812
calls for a configuration option to turn off source routes,
but requires the default to be that the source routes
are processed. I'm not sure this is right, however...
perhaps we should update corresponding IPv4
specifications at the same time, too.

Jari


--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------

Reply via email to