Re: [Idr] Question about RFC4893

[John Leslie <john at jlc.net>]

Enke Chen <enkechen at cisco.com> wrote:
> 
> If we agree that the merge algorithm described in the document is 
> applicable for these examples (mostly with crafted, inconsistent
> data), then I am not sure if there is still value in including them
> in rfc4893bis.

   I see great value in including such examples in a Security
Considerations section pointing out that such things could be observed
due to "buggy" coding or less-than-trustworthy policy application, and
that some implementors have attempted to mitigate the damage caused by
such cases.

--
John Leslie <john at jlc.net>