[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Simple Security - Layered Filtering should be in the document



[snip]
> 
> As far as I know, there are no existing <something>-in-IPv6
> encapsulations that mainstream OSes decapsulate by default. So any
> encapsulated packets will be dropped on the floor by a typical Windows
> or MacOS box, and as such there is no need to spend cycles to filter
> them out.
> 
For the sake of argument, if *all* the current <something>-in-IPv6 proposals
are standardized, then presumably they *will* go into mainstream OSes. And
we're planning exactly for that future - when IPv6 is widely available to
the home.
And hey, if there are no such packets, you're not wasting any cycles on
filtering them. Just a few IETF cycles :-)

Thanks,
	Yaron

Attachment: smime.p7s
Description: S/MIME cryptographic signature