From owner-cvs-all@FreeBSD.ORG  Tue May  1 19:31:17 2007
Return-Path: <owner-cvs-all@FreeBSD.ORG>
X-Original-To: cvs-all@FreeBSD.org
Delivered-To: cvs-all@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id DE4EB16A407
	for <cvs-all@FreeBSD.org>; Tue,  1 May 2007 19:31:17 +0000 (UTC)
	(envelope-from
	SRS0=1e018337347624e7fd82d95b6f1736786aed428d=322=es.net=oberman@es.net)
Received: from postal1.es.net (postal1.es.net [198.128.3.205])
	by mx1.freebsd.org (Postfix) with ESMTP id 4CC0513C4E8
	for <cvs-all@FreeBSD.org>; Tue,  1 May 2007 19:31:16 +0000 (UTC)
	(envelope-from
	SRS0=1e018337347624e7fd82d95b6f1736786aed428d=322=es.net=oberman@es.net)
Received: from ptavv.es.net (ptavv.es.net [198.128.4.29])
	by postal1.es.net (Postal Node 1) with ESMTP (SSL) id GYQ48522;
	Tue, 01 May 2007 12:15:22 -0700
Received: from ptavv.es.net (ptavv.es.net [127.0.0.1])
	by ptavv.es.net (Tachyon Server) with ESMTP id CF83F45076;
	Tue,  1 May 2007 12:15:21 -0700 (PDT)
To: Rui Paulo <rpaulo@fnop.net>
In-Reply-To: Your message of "Tue, 01 May 2007 15:26:20 BST."
	<861wi0mxgz.wl%rpaulo@fnop.net> 
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_1178046921_75116P";
	micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date: Tue, 01 May 2007 12:15:21 -0700
From: "Kevin Oberman" <oberman@es.net>
Message-Id: <20070501191521.CF83F45076@ptavv.es.net>
Cc: "George V. Neville-Neil" <gnn@FreeBSD.org>,
	Darren Reed <darrenr@hub.freebsd.org>, cvs-all@FreeBSD.org,
	src-committers@FreeBSD.org, cvs-src@FreeBSD.org
Subject: Re: cvs commit: src/sys/netinet6 in6.h in6_proto.c route6.c 
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 01 May 2007 19:31:18 -0000

--==_Exmh_1178046921_75116P
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

> Date: Tue, 01 May 2007 15:26:20 +0100
> From: Rui Paulo <rpaulo@fnop.net>
> Sender: owner-cvs-all@freebsd.org
> 
> At Tue, 1 May 2007 04:33:19 +0000,
> Darren Reed wrote:
> > 
> > On Tue, Apr 24, 2007 at 11:42:42AM +0000, George V. Neville-Neil wrote:
> > > gnn         2007-04-24 11:42:42 UTC
> > > 
> > >   FreeBSD src repository
> > > 
> > >   Modified files:        (Branch: RELENG_6)
> > >     sys/netinet6         in6.h in6_proto.c route6.c 
> > >   Log:
> > >   Add a new sysctl net.inet.ip6.rthdr0_allowed, which is default off,
> > >   to disable the processing of Route Header Type 0 options in IPv6.
> > >   This is not really an MFC because currently in HEAD the processing
> > >   of these options is disabled unilateraly pending discussion at the IETF
> > >   on the future of such headers.
> > 
> > Given this direction came from the IETF, is there an internet draft
> > or RFC or BCP that discusses or summarises this?
> 
> No, I don't think there is one yet.

While it may take a while to get out an RFC, you can read the reasons
for this change. It is the result of a presentation at CanSecWest on
April 18 by Biondi and Ebalard. The PDF is available at:
http://www.secdev.org/conf/IPv6_RH_security-csw07.pdf
-- 
R. Kevin Oberman, Network Engineer
Energy Sciences Network (ESnet)
Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
E-mail: oberman@es.net			Phone: +1 510 486-8634
Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751

--==_Exmh_1178046921_75116P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)
Comment: Exmh version 2.5 06/03/2002

iD8DBQFGN5HJkn3rs5h7N1ERAm1tAJ96D3lk7uzCtpr8kbcHrKa1e5cnRQCgl/k/
A53kBVsWRrSEmzP9S4VA+Ck=
=oLcr
-----END PGP SIGNATURE-----

--==_Exmh_1178046921_75116P--