Re: I-D ACTION:draft-savola-v6ops-6to4-security-02.txt

[Brian E Carpenter <brian@hursley.ibm.com>]

I'm wondering what we should do with this draft.

It seems to me to be basically correct (i.e. it says that
there are specific spoofing and DoS attacks using 6to4 that
are harder to trace than "standard" spoofing and DoS attacks).

It is more explicit about the checks to be applied than the base
6to4 specification, but those checks cannot eliminate the attacks.

The document might also assist intrusion-detection implementors
in detecting these attacks.

So I think it should probably be published as an Info RFC, and
if/when we revise the basic 6to4 spec, Pekka's document would
be a source for improving the security section.

   Brian