[secdir] Review of draft-arkko-ipv6-transition-guidelines-08

Shawn Emery <shawn.emery@oracle.com> Mon, 06 December 2010 07:51 UTC

Return-Path: <shawn.emery@oracle.com>
X-Original-To: secdir@core3.amsl.com
Delivered-To: secdir@core3.amsl.com
Received: from localhost (localhost []) by core3.amsl.com (Postfix) with ESMTP id 2F8F33A6A0A; Sun, 5 Dec 2010 23:51:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.559
X-Spam-Status: No, score=-6.559 tagged_above=-999 required=5 tests=[AWL=0.040, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([]) by localhost (core3.amsl.com []) (amavisd-new, port 10024) with ESMTP id AUFFJYATwL9F; Sun, 5 Dec 2010 23:51:07 -0800 (PST)
Received: from rcsinet10.oracle.com (rcsinet10.oracle.com []) by core3.amsl.com (Postfix) with ESMTP id 4EC913A69FC; Sun, 5 Dec 2010 23:51:07 -0800 (PST)
Received: from rcsinet15.oracle.com (rcsinet15.oracle.com []) by rcsinet10.oracle.com (Switch-3.4.2/Switch-3.4.2) with ESMTP id oB67qSlZ023830 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 6 Dec 2010 07:52:29 GMT
Received: from acsmt355.oracle.com (acsmt355.oracle.com []) by rcsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id oB67qQLd024924; Mon, 6 Dec 2010 07:52:27 GMT
Received: from abhmt014.oracle.com by acsmt353.oracle.com with ESMTP id 846545871291621887; Sun, 05 Dec 2010 23:51:27 -0800
Received: from [] (/ by default (Oracle Beehive Gateway v4.0) with ESMTP ; Sun, 05 Dec 2010 23:51:27 -0800
Message-ID: <4CFC95FD.4060902@oracle.com>
Date: Mon, 06 Dec 2010 00:51:25 -0700
From: Shawn Emery <shawn.emery@oracle.com>
User-Agent: Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv: Gecko/20101108 Lightning/1.0b2 Thunderbird/3.1.6
MIME-Version: 1.0
To: secdir@ietf.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: iesg@ietf.org, draft-arkko-ipv6-transition-guidelines.all@tools.ietf.org
Subject: [secdir] Review of draft-arkko-ipv6-transition-guidelines-08
X-BeenThere: secdir@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Area Directorate <secdir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/secdir>
List-Post: <mailto:secdir@ietf.org>
List-Help: <mailto:secdir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdir>, <mailto:secdir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 06 Dec 2010 07:51:08 -0000

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors. Document editors and WG chairs should treat
these comments just like any other last call comments.

This is an informational draft that provides guidance for deploying
IPv6 addresses.

The security considerations section does exist and states that the
draft does not change the security properties of the different models
outlined in the draft.  Reading the individual model RFCs provides
sufficient information for the possible security implications.

General comments:


Editorial comments:

s/connectivity not available/connectivity is not available/
s/and are have/and have/
s/IPv6 networks, notably NRENS like Internet II/IPv6 networks; notably NRENS, Internet II/
Expand NRENS.
s/easy with to/easy to/
s/establishment native connectivity is not possible/native connectivity can not be established/
s/more like to/more likely to/