[as112-ops] IPv6 network block for AS112 and experiments

William F. Maton wmaton at ottix.net
Thu Jul 14 20:41:55 UTC 2011


On Thu, 14 Jul 2011, Nick Hilliard wrote:

> On 14/07/2011 19:52, John van Oppen wrote:
>> Whch sercurity reasons are you eluding to?    It seems most issues would
>> also apply for the in-addr.arpa space as well.
>
> For the most part, people use ptr records in an advisory capacity only.
> However, A/AAAA records are generally used for actual connection attempts.
> So if AS112 were to host .local / .lan / etc, that could be used to
> redirect TCP connection attempts from lan boxes to machines of the AS112
> operator's choice.  This is trivial to abuse.

For that reason and for the politics involving the zones in question, I'm 
favouring that those continue to be dealt with in a separate document.  I 
was contemplating doing that in -cull but I decided that subject needed 
further reflection on its own.

wfms


More information about the as112-ops mailing list