Security Considerations: IP Spoofing

[adammontville]

The following came up during an endpoint ID design team meeting. Security considerations for Information Model may mention IP spoofing mitigations (and any other mitigations against spoofing identifying attributes); may also include information about NAT detection for the purpose of then avoiding that particular IP address as an identifier.

[djhaynes]

I just re-read through our security considerations and they are higher level than this. Do we think we need to call out this low-level information in the security considerations? Or, can we simply close out this issue?

Thanks,

Danny