IPv6 blocks for micro-allocation

[Joe Abley]

On 3 Jun 2008, at 15:25, Pekka Savola wrote:

> On Tue, 3 Jun 2008, Jeroen Massar wrote:
>> First off, if you want it very narrow, just generate your filter  
>> from route6 objects in the RIR registries.
>
> For reasons already mentioned this is probably not a useful idea.  
> I'll mention a couple of others:
>
> - only RIPE DB has a sensible security model (AFAIK).  Anyone can  
> add route6 objects to the other databases, and as such their  
> usefulness is pretty close to zero for any purposes having to do  
> with security.

... and note that RIPE's security model is only strong (which is an  
overstatement, really, but everything's relative) for routes covered  
by aggregate assignments direct to the RIPE NCC by the IANA.

Anybody can register a route6 object taken from ARIN/APNIC/AfriNIC/ 
LACNIC space in the RIPE DB with next to no checks and balances.


Joe