Re: draft-ietf-v6ops-ipv6-cpe-router-04

[Ole Troan <otroan@employees.org>]

Mark, et al,

[removed ipv6]

>>>> Yeah, I think that after the bloody simple-security debates of the past
>>>> week, that many are amazed that anyone on this list was able to miss the
>>>> carnage. Anyway, the current CPE router draft has the following security
>>>> requirements in section 4.4:
>>>>
>>>>  S-1:  The IPv6 CE router SHOULD support
>>>>        [I-D.ietf-v6ops-cpe-simple-security].
>>>>
>
> What does "support" mean?
>
> I would like it to be very clear that "support" does not imply that it be
> set to "transparent" or "non-transparent" mode by default, just that the
> functionality exist and be available to be turned on or off.

that was also indeed my understanding when we wrote that requirement.

would this be even clearer:

S-1:  The IPv6 CE router SHOULD support
[I-D.ietf-v6ops-cpe-simple-security]. Enabling or disabling this
functionality MUST be user configurable.

to me this means that the default would be decided by a vendor or operator.

not quite sure what the process is for updating a draft which has passed WG LC?

cheers,
Ole