IETF Last Call Review of draft-ietf-pim-ipv6-zeroconf-assignment-12
review-ietf-pim-ipv6-zeroconf-assignment-12-secdir-lc-turner-2026-10-06-00

Hi! I read this I-D and RFCs 10019 and 6762. I suspect this is probably a minor
thing, but thought I'd bring it up.

If I am reading RFC 6762 properly, it says that if there's antagonist hosts
then use IPsec or DNSSEC to distinguish from trusted and untrusted
participants. The security considerations in this specification, which do refer
to mDNS by name but don't include the normal "the security considerations of
mDNS apply here as well", seem to kind of down play the mDNS specification's
security considerations by saying:

  In most networks,
  the probability of a collision is already so low that this does not
  result in a practical way to attack the network.

Is the use of mDNS here somehow different than in the base specification as to
make it sound like you're saying "eh don't bother with IPsec or DNSSEC" here?