Fernando Thanks for your feedback, as you kindly requested my thoughts on some changes, see in-line
On 5/06/14 15:41, "Fernando Gont" <[email protected]> wrote: > >> * Add a reference to SAVI-DHCP ? > >SAVI-DHCP seems rather orthogonal... but I might be wrong. i.e., >savi-dhcp seems to be about building state on the layer-2 device based >on DHCPv6 exchanges, rather than about preventing malicious DHCPv6 >exchanges. Am I right? > >In any case, I guess one could add an informational reference as follows: >"The security of a site employing DHCPv6 Shield could be further >improved by deploying [SAVI-DHCP], to mitigate IPv6 address spoofing". > >Thoughts? This is indeed mostly orthogonal, each technique can be deployed without the other one. But, you proposed paragraph is correct and will be helpful for the readers/implementers. -éric _______________________________________________ OPSEC mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsec
