Add Security Considerations and IANA Considerations sections

ietf-wg-snac / draft-ietf-snac-simple

Automatically Connecting Stub Networks to Unmanaged Infrastructure

2 stars 5 forks source link

Add Security Considerations and IANA Considerations sections #50

Closed EskoDijk closed 2 weeks ago

EskoDijk commented 4 months ago

For security we may add:

risk of advertising self-generated ULA prefix? Any specifics?
if site employs technology like RA-guard, the RAs of our unmanaged stub router will be blocked

Abhayakara commented 4 months ago

These sound more like operational considerations than security considerations. I suppose if we want to advise sites that do not want stub routers attaching to block RA, that would make sense, but I don't think that's really a problem unique to stub routers.

Regarding the ULA prefix, the only risk is one we've already addressed: that the prefix could be used for tracking. I think the text on varying prefixes per-link probably needs work, but that addresses the privacy concern.