Re: 6to4 security questions

[Brian E Carpenter <brian@hursley.ibm.com>]

Pekka Savola wrote:
> 
> On Fri, 22 Nov 2002, Brian E Carpenter wrote:
> > There are spoofing/DDOS risks in the host-based anycast 6to4 model
> > that has been implemented but never fully specified.
> 
> Do not classify this as "host-based".  There is nothing particularly
> host-based in this.

Yes there is, because hosts don't generally support BGP4+

> 
> And you said you're not aware of anything in the spec that'd need
> modification. Right..

My original preference was to *only* specify the BGP4+ model
for 6to4. I was talked out of it. 

   Brian