Default security functions on an IPv6 CPE

Fernando Gont fernando at gont.com.ar
Tue May 31 00:31:40 CEST 2011


On 05/30/2011 07:21 PM, Doug Barton wrote:

>> Christian Huitema had noted on 6man@ that they generate IPv6 addresses
>> as a result of a hash function that includes the prefix. i.e., the
>> address (IID) varies from network to network, but is constant within the
>> network.
> 
> Yeah, my understanding is that it's not quite 4941, it's what I
> not-really-jokingly refer to as the microsoft embrace and extend 4941
> work-alike. In this particular case the differences don't seem to
> actually hurt anything however, so points for that. :)

Well, it does help privacy -- provided you think that temp addresses
help in that area (many argue that they don't, though)

Thanks,
-- 
Fernando Gont
e-mail: fernando at gont.com.ar || fgont at acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1





More information about the ipv6-ops mailing list