Re: draft-ietf-v6ops-cpe-simple-security-12.txt feedback

[Fred Baker <fred@cisco.com>]

On Aug 8, 2010, at 3:00 AM, Mark Smith wrote:

> It might be better to say in this draft something like, "all
> multicast traffic is not to be forwarded by the CPE, unless appropriate
> multicast traffic security mechanisms have been implemented. Such
> multicast security mechanisms are out of scope for this memo." (or
> addressed in a multicast security RFC that I'm not aware of.)

Again, I'm wrestling with the distinction between the security draft and the CPE Router draft. Absent the configuration of some form of multicast routing, I would be surprised by the router forwarding anything at all. Configuration of routing protocols or mechanisms, and routing behaviors on or off by default, sounds more like the subject of the CPE Router draft to me. I should think that the security draft is about filters - "presuming that a standard router would choose to forward the datagram, is there any other policy that would prevent it?" A standard router doesn't do a thing with MLD unless it is configured to do so.