Appreciate that Fernando. Eric did a great job enumerating the actual changes which stemmed from the comments made in last 2 meetings and the mailing list. We did go back to review the videos of the meetings and hope we addressed (pun intended :)) all issues that were pointed out.
Looking forward to seeing comments from the review from you and rest of working group. - merike > On Oct 24, 2018, at 3:24 PM, Fernando Gont <fg...@si6networks.com> wrote: > > Hi, Eric, > > I was just abut to re-read the previous version of the I-D. Wil read the > last one you posted and send comments. > > Thanks! > > Cheers, > Fernando > > > > > On 10/24/18 8:36 AM, Eric Vyncke (evyncke) wrote: >> As you know by now, there will be no OPSEC WG meeting at IETF-103 in >> November (there was only 1 item on the agenda). So, the authors of >> opsec-v6 document would like to start discussion on the latest revision. >> Please find below the link to the differences between -12 and -14 (so >> two revisions). >> >> >> >> https://tools.ietf.org/rfcdiff?url2=draft-ietf-opsec-v6-14.txt&url1=draft-ietf-opsec-v6-12.txt >> >> >> >> >> It is mainly about: >> >> - Section 2.1 Addressing Architecture: adding RFC 7934 reference w/ >> multiple addresses per host >> >> - Section 2.1.2 Use of ULAs: 95% complete rewrite >> >> - Section 2.1.3: Point-to-point links: text simplified >> >> - Section 2.1.4: Temporary addresses: added reference to RFC 8064 >> (stable address), text more in favor of privacy addresses, text >> simplification >> >> - Section 2.2: extension headers: the introduction paragraph is >> clarified and split in two >> >> - Section 2.2.1. Order and Repetition of Extension Headers: add >> recommendation to use firewall (if required) supporting header filtering >> >> - Section 2.2.2: hop by hop extension header: complete rewrite in line >> with RFC 8200 >> >> - Section 2.3.1. Securing DHCP: added some text around secure DHCPv6 >> >> - Section 2.6.2.1. Forensic: added clarification >> >> - Section 2.6.2.2. Inventory: removed the paragraph about NXDOMAIN & >> NOERROR in DNS zone enumeration >> >> - Section 2.6.2.3. Correlation: added text on multiple IPv6 addresses >> per node (per RFC 7934) >> >> - Section 2.7.2.6. Teredo & 6to4: moved to the end of the tunnel >> section + text about their current status >> >> >> >> Comments are of course welcome. >> >> >> >> -éric -merike -enno -kk >> >> >> >> >> >> >> _______________________________________________ >> OPSEC mailing list >> OPSEC@ietf.org >> https://www.ietf.org/mailman/listinfo/opsec >> > > > -- > Fernando Gont > SI6 Networks > e-mail: fg...@si6networks.com > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 > > > > > _______________________________________________ > OPSEC mailing list > OPSEC@ietf.org > https://www.ietf.org/mailman/listinfo/opsec >
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ OPSEC mailing list OPSEC@ietf.org https://www.ietf.org/mailman/listinfo/opsec