Re: [v6ops] draft-ietf-v6ops-balanced-ipv6-security WGLC

[joel jaeggli <[e-mail]>]

On 11/14/13, 11:13 AM, Brian E Carpenter wrote:
> On 14/11/2013 19:56, Mikael Abrahamsson wrote:
> ...
>> Most of the devices today can handle themselves having unfiltered access
>> to the Internet. Phones and computers are regularily exposed to the
>> Internet and have sane defaults to handle this. 
> 
> That's a vital point. Mobile devices, including laptops, are potentially
> exposed to raw Internet, so relying on a separate firewall is totally
> unsafe. That's not to say that firewalls are pointless - it's helpful if
> unwanted traffic is dropped at the perimeter - but if your device isn't
> intrinsically protected, all hope is lost as soon as you step outside
> the building. In these days of BYOD, unprotected devices will end up
> infected and will later infect the corporate network, so even screwed-down
> desktop devices need intrinsic protection.

It is reasonable to suppose that most devices should not assume that a
home network is anymore trustworthly or less potentially hostile than
any other... Hard crunchy exterior and soft gooey center is best
reserved for candy-bars.

> That said, the *informational* draft in question is useful as an example
> of a possible deployment scenario.
> 
>     Brian
> _______________________________________________
> v6ops mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/v6ops
>