Summary: Has Nits Comments: - Section 3: is it possible for an attacker to send DHCPv6 Prefix Delegations with lifetime=0 to CE routers that support LAN-side DHCPv6 and amplify Reconfigure messages to supporting clients? (I don't know if this is a concern or part of the threat model, but this did seem to be a case of possible request/response asymmetry.) - Section 4: rationale for these default values, if available, might be worth including. (Why not make them shorter? What are the tradeoffs?) - Section 6: it might be worth noting what happens if stable storage is unavailable or otherwise compromised when trying to store prefix information. What happens if the "A" or "L" bits are modified? (I suspect nothing dangerous, but it's not clear to me whether or not integrity is important.) Nits: - In some places "\"Valid Lifetime\"" is written as "valid-lifetime" -- should these be made consistent?