Default security functions on an IPv6 CPE
Mark Smith
nanog at 85d5b20a518b8f6864949bd940457dc124746ddc.nosense.org
Tue May 31 00:59:07 CEST 2011
On Mon, 30 May 2011 19:31:40 -0300
Fernando Gont <fernando at gont.com.ar> wrote:
> On 05/30/2011 07:21 PM, Doug Barton wrote:
>
> >> Christian Huitema had noted on 6man@ that they generate IPv6 addresses
> >> as a result of a hash function that includes the prefix. i.e., the
> >> address (IID) varies from network to network, but is constant within the
> >> network.
> >
> > Yeah, my understanding is that it's not quite 4941, it's what I
> > not-really-jokingly refer to as the microsoft embrace and extend 4941
> > work-alike. In this particular case the differences don't seem to
> > actually hurt anything however, so points for that. :)
>
> Well, it does help privacy -- provided you think that temp addresses
> help in that area (many argue that they don't, though)
>
What are their arguments?
> Thanks,
> --
> Fernando Gont
> e-mail: fernando at gont.com.ar || fgont at acm.org
> PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1
>
>
>
More information about the ipv6-ops
mailing list