Question for WG/authors: how much routing (bridging) instability does this naming scheme create when new interconnections are added, particularly of redundant connections (as suggested in Fig 1)?  I'm imagining that interconnection (and disconnection) happen relatively easily and often and this this naming scheme might create instability that need not exist when a redundant link goes up or down.

Other than that: I'm not happy with TRILL's security story, in general, but this doesn't seem to make it any worse.