Default security functions on an IPv6 CPE

Mark Smith nanog at 85d5b20a518b8f6864949bd940457dc124746ddc.nosense.org
Tue May 31 00:59:07 CEST 2011


On Mon, 30 May 2011 19:31:40 -0300
Fernando Gont <fernando at gont.com.ar> wrote:

> On 05/30/2011 07:21 PM, Doug Barton wrote:
> 
> >> Christian Huitema had noted on 6man@ that they generate IPv6 addresses
> >> as a result of a hash function that includes the prefix. i.e., the
> >> address (IID) varies from network to network, but is constant within the
> >> network.
> > 
> > Yeah, my understanding is that it's not quite 4941, it's what I
> > not-really-jokingly refer to as the microsoft embrace and extend 4941
> > work-alike. In this particular case the differences don't seem to
> > actually hurt anything however, so points for that. :)
> 
> Well, it does help privacy -- provided you think that temp addresses
> help in that area (many argue that they don't, though)
> 

What are their arguments?

> Thanks,
> -- 
> Fernando Gont
> e-mail: fernando at gont.com.ar || fgont at acm.org
> PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1
> 
> 
> 


More information about the ipv6-ops mailing list