Stephen Farrell has entered the following ballot position for draft-ietf-opsec-ipv6-host-scanning-07: Yes
When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html for more information about IESG DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-opsec-ipv6-host-scanning/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - general: @Fernando: thank you for writing a document that does not recommend turning off IPv6:-) - general: shouldn't you recommend a honeynet approach as another way of spotting scans when there ought be none? That might fit in 3.5 I guess. - intro: what evidence is there that the number of hosts per subnet is likely to stay the same? (And what do you consider an IPv4 subnet here? a /16 is it? Maybe worth saying.) The density point still applies though, but good to not assume things that aren't needed. - 3.1.1 - I would recommend you check with Christian Huitema about Windows10 which has some new features related to MAC addresses. I don't know if there is new IPv6 handling associated with those changes. - 3.4.1 s/patters/patterns/ _______________________________________________ OPSEC mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsec
