I-D Action: draft-wkumari-intarea-safe-limited-domains-07.txt

Internet-Draft draft-wkumari-intarea-safe-limited-domains-07.txt is now
available.

   Title:   Safe(r) Limited Domains
   Authors: Warren Kumari
            Andrew Alston
            Éric Vyncke
            Suresh Krishnan
            Donald Eastlake
   Name:    draft-wkumari-intarea-safe-limited-domains-07.txt
   Pages:   15
   Dates:   2026-08-30

Abstract:

   Documents describing protocols intended solely for use within
   "limited domains" often rely on edge filtering at every boundary node
   to prevent domain-internal traffic from leaking to the global
   Internet (and vice versa).  Relying purely on administrative
   filtering creates "fail-open" designs that are susceptible to
   configuration errors, ACL bypass, and hardware table exhaustion.

   This document describes design principles and concrete mechanisms
   that allow limited-domain protocols to "fail-closed" by default.  By
   leveraging Layer-2 encapsulation identifiers (such as dedicated or
   extended EtherTypes), link-local address scoping, and / or Hop-Limit
   boundaries, protocol designers can significantly reduce the
   operational and security risks associated with limited domain
   protocols.

   These mechanisms are not applicable to all protocols intended for use
   in a limited domain, but if implemented on certain classes of
   protocols, can significantly reduce the risks.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-wkumari-intarea-safe-limited-domains/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-wkumari-intarea-safe-limited-domains-07.html

A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-wkumari-intarea-safe-limited-domains-07

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]