Re: [dna] AD review of draft-ietf-dna-simple

[Bernard Aboba <[e-mail]>]

Jari said: 

> There is no text associated with DHCPv6 security or interaction 
> of ND/DHCPv6 security. Perhaps something is needed there as well.

The basic question is how the host should behave in situations where security is available. For example, where SEND is available, but not DHCPv6 security, is it always appropriate to prefer the DHCPv6-assigned address?  One one hand, the address determined from SEND is "more secure";  on the other hand, it is also possible that the DHCPv6-assigned address, albeit without security, is correct (e.g. DHCPv6 server might have lost state and assigned the address to someone else, now suggests another one).  

Where DHCPv6 security is available, but not SEND, it would probably make sense to prefer the DHCPv6-assigned address.  Since the document already says that, much more may not be needed, except to point out that the host could end up with an "insecure" address for a short period of time.