[135588] in North American Network Operators' Group
Re: Ipv6 for the content provider
daemon@ATHENA.MIT.EDU (Owen DeLong)
Wed Jan 26 21:28:54 2011
From: Owen DeLong <owen@delong.com>
In-Reply-To: <alpine.OSX.2.00.1101261257290.211@cust11794.lava.net>
Date: Wed, 26 Jan 2011 16:45:41 -0800
To: Antonio Querubin <tony@lava.net>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jan 26, 2011, at 2:59 PM, Antonio Querubin wrote:
> On Wed, 26 Jan 2011, Owen DeLong wrote:
>=20
>> It would be nice if BSD would correct their IPV6_V6ONLY behavior =
instead
>> of putting up an alleged security red herring. I'm not sure why =
Micr0$0ft suffers
>> from this braindeath.
>=20
> Or at the very least document this in plain site in the IPv6 section =
of the docs. Their non-RFC-compliant behaviour is a hidden land mine.
>=20
> Antonio Querubin
> e-mail/xmpp: tony@lava.net
It's actually pretty well known and it is documented in several places =
in plain
sight.
They're quite proud of their brokenness and they extol the virtues of =
the
allegedly improved security profile it provides.
I think Rolland Dobbins has coined a good term for it... "Security =
Theater".
(Though this strikes me as being more like "Security Circus")
Owen