Dear all, I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG.  These comments were written primarily for the benefit of the security area directors.  Document editors and WG chairs should treat these comments just like any other last call comments.   It basically discusses the case, when there are no readily available IPv4 public address to embed into the IPv6 address.   It recommends the use of the Interface IP address as a sub object. So the interface IP address of the Translator would be used as a sub object? As there might be a number of hosts connected to the translator ( connected to a translator via a switch), would a single interface ip address suffice in such a case?   Is it possible to include one public IPv4 address and ports (as in case of PAT) to embed the address.   Thank you, Tina