I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document defines a method for DHCPv6 routers to exclude a prefix out of a delegated set of prefixes. I have no comments on the document itself but the Security Considerations section is very terse. If the method in this draft does not introduce any new security considerations beyond those already present in RFC 3315 or RFC 3633 then it should at least say so. It appears to me however that something could be said about authenticating the request to exclude a particular prefix? -- Magnus