Re: [OPSEC] [v6ops] draft-ietf-opsec-v6

[神明達哉 <[e-mail]>]

(Note: I don't subscribe to [e-mail].  So I expect this message
will be subject to moderation).

At Fri, 29 Mar 2019 06:18:37 +0100,
Fred Baker <[e-mail]> wrote:

> Yesterday, the authors of an opec draft asked us for comments on their
draft, which is in a second WGLC in opec ([e-mail]). You may have
missed the character string:
>
> https://datatracker.ietf.org/doc/draft-ietf-opsec-v6
> https://tools.ietf.org/html/draft-ietf-opsec-v6
>   "Operational Security Considerations for IPv6 Networks", Eric Vyncke,
>   Chittimaneni Kk, Merike Kaeo, Enno Rey, 2019-03-11,
>
> I'd encourage people to read it and comment on the opec list.

One quick comment, in case no one pointed it out: Section 2.3.3 refers
to I-D.ietf-dhc-sedhcpv6 as follows:

   [...] Another way to secure
   DHCPv6 would be to use the secure DHCPv6 protocol which is currently
   work in progress per [I-D.ietf-dhc-sedhcpv6] , but, with no real
   deployment known by the authors of this document.

In my understanding, this draft is effectively dead rather than just
missing deployment.  There may be yet another attempt of restarting it
in future, but I see no indication of it right now.  Even if the work
is eventually restarted it will be something completely different from
the current latest draft.  So I'd suggest either:
- just remove this sentence, or
- if you want to keep the reference, make it more consistent with the
  current situation, like:
    There was a proposal of secure DHCPv6 protocol [I-D.ietf-dhc-sedhcpv6],
    but the work has been effectively suspended and there is no
    indication of a restart anytime soon.

--
JINMEI, Tatuya