>> this glibly glosses over that, by outsourcing origin validation, an >> attack vector is introduced. i presume i do not need to describe it. >> so it needs to be big in the sec cons. > Is it bigger than the attack vector allowed for when not doing origin > validation at all?
now we're comparing the size of the guns used to shoot yourself in the foot? my point was that it needs to go in the sec cons. not the size of the type to be used. randy _______________________________________________ sidr mailing list [email protected] https://www.ietf.org/mailman/listinfo/sidr
