Hi, Eric,

I was just abut to re-read the previous version of the I-D. Wil read the
last one you posted and send comments.

Thanks!

Cheers,
Fernando




On 10/24/18 8:36 AM, Eric Vyncke (evyncke) wrote:
> As you know by now, there will be no OPSEC WG meeting at IETF-103 in
> November (there was only 1 item on the agenda). So, the authors of
> opsec-v6 document would like to start discussion on the latest revision.
> Please find below the link to the differences between -12 and -14 (so
> two revisions).
> 
>  
> 
> https://tools.ietf.org/rfcdiff?url2=draft-ietf-opsec-v6-14.txt&url1=draft-ietf-opsec-v6-12.txt
> 
> 
>  
> 
> It is mainly about:
> 
> - Section 2.1 Addressing Architecture: adding RFC 7934 reference w/
> multiple addresses per host
> 
> - Section 2.1.2 Use of ULAs: 95% complete rewrite
> 
> - Section 2.1.3: Point-to-point links: text simplified
> 
> - Section 2.1.4: Temporary addresses: added reference to RFC 8064
> (stable address), text more in favor of privacy addresses, text
> simplification
> 
> - Section 2.2: extension headers: the introduction paragraph is
> clarified and split in two
> 
> - Section 2.2.1.  Order and Repetition of Extension Headers: add
> recommendation to use firewall (if required) supporting header filtering
> 
> - Section 2.2.2: hop by hop extension header: complete rewrite in line
> with RFC 8200
> 
> - Section 2.3.1.  Securing DHCP: added some text around secure DHCPv6
> 
> - Section 2.6.2.1.  Forensic: added clarification
> 
> - Section 2.6.2.2.  Inventory: removed the paragraph about NXDOMAIN &
> NOERROR in DNS zone enumeration
> 
> - Section 2.6.2.3.  Correlation: added text on multiple IPv6 addresses
> per node (per RFC 7934)
> 
> - Section 2.7.2.6.  Teredo & 6to4: moved to the end of the tunnel
> section + text about their current status
> 
>  
> 
> Comments are of course welcome.
> 
>  
> 
> -éric -merike -enno -kk
> 
>  
> 
>  
> 
> 
> _______________________________________________
> OPSEC mailing list
> OPSEC@ietf.org
> https://www.ietf.org/mailman/listinfo/opsec
> 


-- 
Fernando Gont
SI6 Networks
e-mail: fg...@si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492




_______________________________________________
OPSEC mailing list
OPSEC@ietf.org
https://www.ietf.org/mailman/listinfo/opsec

Reply via email to