[as112-ops] IPv6 network block for AS112 and experiments
William F. Maton
wmaton at ottix.net
Thu Jul 14 20:41:55 UTC 2011
On Thu, 14 Jul 2011, Nick Hilliard wrote:
> On 14/07/2011 19:52, John van Oppen wrote:
>> Whch sercurity reasons are you eluding to? It seems most issues would
>> also apply for the in-addr.arpa space as well.
>
> For the most part, people use ptr records in an advisory capacity only.
> However, A/AAAA records are generally used for actual connection attempts.
> So if AS112 were to host .local / .lan / etc, that could be used to
> redirect TCP connection attempts from lan boxes to machines of the AS112
> operator's choice. This is trivial to abuse.
For that reason and for the politics involving the zones in question, I'm
favouring that those continue to be dealt with in a separate document. I
was contemplating doing that in -cull but I decided that subject needed
further reflection on its own.
wfms
More information about the as112-ops
mailing list