Re: [v6ops] [IPv6] Why folks are blocking IPv6 extension headers? (Episode 1000 and counting) (Linux DoS)

[Fernando Gont <[e-mail]>]

Hi, David,

On 22/5/23 18:05, David Farmer wrote:
[...]
> 
>     I think that many of us are still reeling from default configuration of
>     certain "firewalls" that banks seemed like, which dropped packets
>     containing
>     ECN, and TCP options, and made it very very difficult to deploy new
>     things.
>     Even when at the IETF standards level... (so "innovation with
>     permission")
> 
> 
> So, I think we need "permissionless innovation" at the Internet level. 
> Nevertheless, that doesn't mean "innovation with permission" isn't 
> appropriate in some or even many situations. For example, in a situation 
> involving public safety, like a nuclear reactor or a missile control 
> system. We can all agree that "permissionless innovation" isn't 
> necessarily appropriate in situations like these.

For the Security guy, the "nuclear reactor" is the infrastructure that, 
if compromised or DoS, causes clients to complain, money to be lost, and 
eventually, staff to be fired.

Yes, I love to play with EHs.... in a lab. :-)

Thanks,
-- 
Fernando Gont
e-mail: [e-mail]
PGP Fingerprint: 7F7F 686D 8AC9 3319 EEAD C1C8 D1D5 4B94 E301 6F01