Re: [Idr] Can we eliminate the "IETF Review" Capablities range? [was: Re: I-D Action: draft-ietf-idr-capabilities-registry-change-04.txt]

[Jeffrey Haas <[e-mail]>]

Bruno, Tom,

On Fri, May 24, 2019 at 09:49:59AM +0000, [e-mail] wrote:
> > John
> > 
> > I see it as a question of security.  The Internet used to consist of
> > friendly, helpful people who worked together to make it happen.  Now
> > there is a whole raft of evil people, some state actors, some
> > individual, some corporate - in fact, actors of any kind.
> 
> Two months ago, I would have said go for "2.a. Make 1-238 all FCFS" but as of today, I think Tom as a point.
> 
> A few random comments:
> - If an actor requests all the code points, we probably still have the ability to write an RFC and reclaim those code points. We also have one reserved code point which would allow for extensions (but with a higher incremental cost, and possibly raising the same question for the allocation policy)

I think what you're suggesting is a conversation needs to happen with IANA
about how to prevent a DoS on the FCFS range.  Providing a standards
rate-limiting mechanism (our other policies) does indeed address that.

However, I think we're better off having the conversation with IANA on how
to keep low-process while at the same time wisely assigning things.

-- Jeff