Re: [Status] Jari Arkko's BLOCK on charter-ietf-spring-00-06

[Stewart Bryant <[e-mail]>]

On 10/10/2013 14:54, Thomas Narten wrote:
> FWIW, I agree with Jari's base observation about the challenges of
> source routing in IPv6 (and IPv4).
>
> I think a key point is that with IPv6, we are talking (potentially)
> end-to-end exposure of an attack vector. You can have arbitrary end
> nodes anywhere on the Internet injecting traffic that potentially
> directly invokes or impacts source routing. In contrast, one can view
> MPLS as an L2 technology below IP. That means it's deployed in a much
> more restricted setting and a normal sender of TCP/IP has a much more
> restricted attack vector for doing anything that impacts MPLS directly
> (this is key diffference). That means the threat surface for attacks
> on MPLS are very different than for IPv6 more generally.
>
> What has torpedoed source routing in IP is precisely that it is done
> at the IP level, where it's difficult to prevent arbitrary attackers
> from anywhere on the Internet creating mischief.
>
> Thomas

Thomas

My point is that just because it is challenging, does not mean we
should accept the challenge if the use case is there.

What is required is charter text that sets the bar appropriately.

Stewart