IPv6 Security [Was: Re: misunderstanding scale]

Wed Mar 26 22:49:51 UTC 2014

On Wed, Mar 26, 2014 at 10:55:03AM -0700, Luke S. Crawford wrote:
> There are many ways to skin this cat; stateless autoconfig looks
> like it mostly works, but privacy extensions seem to be the default
> in many places; outgoing IPv6 from those random addresses will trip
> my BCP38 filters.

Your what-now?  You do realise SLAAC works entirely within a single /64,
which shouldn't be difficult to decide is either routable or not in one hit,
right?

- Matt

-- 
Q: Why do Marxists only drink herbal tea?
A: Because proper tea is theft.
		-- Chris Suslowicz, in the Monastery