Re: [IPv6] [v6ops] Why folks are blocking IPv 6 extension headers? (Episode 1000 and counting) (Linux DoS)
Fernando Gont <[email protected]>
| Newsgroups | gmane.ietf.opsec,gmane.ietf.v6ops,gmane.ietf.ipv6 |
|---|---|
| Organization | SI6 Networks |
| Message-ID | <[email protected]> |
On 26/5/23 18:01, Tom Herbert wrote: > On Fri, May 26, 2023 at 8:12 AM Fernando Gont <[email protected]> wrote: [...] >> >> That said, I'm not that fine if invited to a party where, if anything, I >> will only pay the bills. So, I block everything that I don't use. e.g., >> I have no use for EHs in any of my servers, except the pentesting boxes >> that I use to send weird packets to others. > > Fernando, > > If you're making that decision as the operator of a public network > then you are not making that decision for yourself, but you're making RFC9098. > a "big brother" decision for others and preventing permissionless > innovation as Brian stated nicely. I don't believe it could be claimed > that this is for "the good of the Internet". Companies are run to make money, not for the good of the Internet. And if your clients get downtime as a result of you keeping things wide open "for the good Internet", you'll likely have an interesting (unpleasant) conversation with your upstream management. Thanks, -- Fernando Gont SI6 Networks e-mail: [email protected] PGP Fingerprint: F242 FF0E A804 AF81 EB10 2F07 7CA1 321D 663B B494 _______________________________________________ OPSEC mailing list [email protected] https://www.ietf.org/mailman/listinfo/opsec