Default security functions on an IPv6 CPE
Fernando Gont
fernando at gont.com.ar
Tue May 31 00:31:40 CEST 2011
On 05/30/2011 07:21 PM, Doug Barton wrote:
>> Christian Huitema had noted on 6man@ that they generate IPv6 addresses
>> as a result of a hash function that includes the prefix. i.e., the
>> address (IID) varies from network to network, but is constant within the
>> network.
>
> Yeah, my understanding is that it's not quite 4941, it's what I
> not-really-jokingly refer to as the microsoft embrace and extend 4941
> work-alike. In this particular case the differences don't seem to
> actually hurt anything however, so points for that. :)
Well, it does help privacy -- provided you think that temp addresses
help in that area (many argue that they don't, though)
Thanks,
--
Fernando Gont
e-mail: fernando at gont.com.ar || fgont at acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1
More information about the ipv6-ops
mailing list