using "reserved" IPv6 space

valdis.kletnieks at vt.edu valdis.kletnieks at vt.edu
Sat Jul 14 21:36:52 UTC 2012


On Sat, 14 Jul 2012 15:14:45 -0500, -Hammer- said:

>     The whole purpose of this is that they do NOT need to be global.
> Security thru obscurity. It actually has a place in some worlds. Does that
> make sense? Or are such V4-centric approaches a bad thing in v6?

The fact that your prefix is a Secret Sauce that isn't known to the rest of
the world won't matter much to an attacker.  One 'ifconfig' on whatever
beachhead machine the attacker has inside your net, and it's not Secret
Sauce anymore, it's just another bottle of Thousand Island dressing...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 865 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20120714/92092e30/attachment.sig>


More information about the NANOG mailing list