Folks, one design question for SAVI that we haven't explicitly addressed so far is whether SAVI should prevent the spoofing of unused IP addresses. I would like to solicit your comments on this topic. Please consider both, the benefits and the costs, which the protection of unused IP addresses would yield or entail, respectively. Note that there are good arguments for both approaches: Preventing spoofing of unused IP addresses will certainly help combating DDoS attacks. OTOH, it has the disadvantage that it may make a SAVI solution more complex. Also, in IPv6, the ability for hosts to obtain a new IP address autonomously (via SLAAC) reduces the benefit of protecting unused IP addresses, because an unused IP address can easily be turned into a used one. Comments and thoughts are welcome. - Christian
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.