@techreport{yang-spring-srv6-verification-05,
    number =    {draft-yang-spring-srv6-verification-05},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-yang-spring-srv6-verification/05/},
    author =    {Feng Yang and Xiaoqiu Zhang and Changwang Lin and Zhang Han},
    title =     {{SRv6 Path Verification}},
    pagetotal = 11,
    year =      2026,
    month =     jun,
    day =       28,
    abstract =  {SRv6 is being rapidly deployed and is currently primarily used in trusted-domain backbone networks. However, we have also observed that SRv6 is beginning to extend toward customer site devices, e.g., SD-WAN and enterprise network deployments. Both of the scenarios can be deployed in third-party clouds or at customer sites. This introduces certain security risks, such as packet injection and path manipulation attacks. Section 6 of {[}I-D.draft-ietf-spring-srv6-security{]} identifies these risks as well, including Section 6.2.1 on Modification Attacks and Section 6.2.3 on Packet Insertion. This proposal mitigates these risks by enhancing the HMAC mechanism defined in {[}RFC8754{]}.},
}