Erik Kline <[email protected]> wrote:
> Most discussion has, co-chair hat off, be circling around some minimal
> working API mechanism to get things started.
> That said, one could easily imagine, for example, something as simple
> as an additional API boolean key,
> "quarantined": true|false,
I think that I want to implement exactly this then.
This means providing the API info in the DHCPv4 to all devices, but
for many devices, even though there is no restriction at all.
A concern that was recently raised is attackers that might attempt to
impersonate other devices (same L2/L3 address), and do things to trigger
quarantine. Once you train the users to unquarantine without thinking...
--
] Never tell me the odds! | ipv6 mesh networks [
] Michael Richardson, Sandelman Software Works | network architect [
] [email protected] http://www.sandelman.ca/ | ruby on rails [
Attachment:
signature.asc
Description: PGP signature