> On 9 Nov 2019, at 22:35, Bob Hinden <[email protected]> wrote:
> 
>>>>> The hop-by-hop options header, when present in an IPv6 packet, forces
>>>>> all nodes in the path to inspect this header in the original IPv6
>>>>> specification [RFC2460].  This enables denial of service attacks as
>>>>> most, if not all, routers cannot process this kind of packets in
>>>>> hardware but have to 'punt' this packet for software processing.

I believe this statement is far out of date. 
I would recommend getting recent data on this or delete it. 

Cheers 
Ole

_______________________________________________
OPSEC mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/opsec

Reply via email to