Re: R41 in draft-ietf-v6ops-cpe-simple-security-07

[Rémi Denis-Courmont <remi@remlab.net>]

On Tue, 4 Aug 2009 14:55:08 -0700, Mark Baugher <mbaugher@cisco.com> wrote:

>> And I'll second Remi's opinion, a firewall that can be manipulated by

>> malware is better than no firewall at all.

> 

> If we're going to design firewall control for IPv6, whether it be

> something new like ALD or an obvious extension to what's done for

> IPv4, I think it should default to authenticated firewall control.



We must live in different planet. Because on my planet, most people

wouldn't know how to authenticate to their firewall. IPv6 is supposed to be

at least as easy to configure as IPv4...



-- 

Rémi Denis-Courmont