Re: comments from Steve Bellovin ondraft-ietf-ipv6-scoping-arch-01.txt

[Francis Dupont <Francis.Dupont@xxxxxxxxxxxxxxxx>]

 In your previous mail you wrote:

   Then how about the following change?
   
=> we have almost finished:

   Proposed resolution (new)
   
      A limited scoped address without its zone identifier value has
      security implications, and cannot be used for some security
      contexts.  For example, a link-local address cannot be used as a
      part of a security association for Internet Key Exchange (IKE) when
      the IKE packets are carried over global addresses.  Also, a
      link-local address without its zone identifier cannot be used in
      access control lists.
   
   Proposed resolution (better)
   
      A limited scoped address without its zone identifier value has
      security implications, and cannot be used for some security
      contexts.  For example, a link-local address cannot be used in
      a traffic selector of a security association established by
      Internet Key Exchange (IKE) when
      the IKE messages are carried over global addresses.  Also, a
      link-local address without its zone identifier cannot be used in
      access control lists.
   
Thanks

Francis.Dupont@enst-bretagne.fr

--------------------------------------------------------------------
IETF IPv6 working group mailing list
ipv6@ietf.org
Administrative Requests: https://www1.ietf.org/mailman/listinfo/ipv6
--------------------------------------------------------------------