Re: reqs for local addressing OR requirements for SLreplacement?[Re: Accept hain/templin draft as wg item?]

2003-08-26 Thread Brian E Carpenter
The other point that's been missed here is that the security-by-hiding argument is only part of the story. Stable address space for intermittently connected networks, unambiguous address space for VPNs, and stable identifiers for multihoming, are also needed. Whatever your religion on the hiding

Re: reqs for local addressing OR requirements for SLreplacement?[Re: Accept hain/templin draft as wg item?]

2003-08-26 Thread Eliot Lear
Brian E Carpenter wrote: The other point that's been missed here is that the security-by-hiding argument is only part of the story. Stable address space for intermittently connected networks, unambiguous address space for VPNs, and stable identifiers for multihoming, are also needed. Whatever

Re: reqs for local addressing OR requirements for SLreplacement?[Re: Accept hain/templin draft as wg item?]

2003-08-26 Thread Love Hörnquist Åstrand
Michel Py [EMAIL PROTECTED] writes: Since I'm so dumb explain me why isn't the good car lock installed on every car yet? It's not like the car lock problem is new. And why isn't your miracle security setup installed on every network? We have a word for people such as yourself that claim

RE: reqs for local addressing OR requirements for SLreplacement?[Re: Accept hain/templin draft as wg item?]

2003-08-26 Thread Tony Hain
Eliot Lear wrote: Brian E Carpenter wrote: The other point that's been missed here is that the security-by-hiding argument is only part of the story. Stable address space for intermittently connected networks, unambiguous address space for VPNs, and stable identifiers for

Re: reqs for local addressing OR requirements for SLreplacement?[Re: Accept hain/templin draft as wg item?]

2003-08-25 Thread Hans Kruse
I fear this discussion is headed in the wrong direction as far as the decisions in this group. You are of course right that filtering (by private or public addresses) at a border is not sufficient security. But it DOES remove some unwanted traffic. Is this relevant to local addressing --