[154862] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: using "reserved" IPv6 space

daemon@ATHENA.MIT.EDU (valdis.kletnieks@vt.edu)
Sat Jul 14 17:38:05 2012

To: -Hammer- <bhmccie@gmail.com>
In-Reply-To: Your message of "Sat, 14 Jul 2012 15:14:45 -0500."
 <CC273D17.36A97%bhmccie@gmail.com>
From: valdis.kletnieks@vt.edu
Date: Sat, 14 Jul 2012 17:36:52 -0400
Cc: nanog@nanog.org, Brandon Ross <bross@pobox.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

--==_Exmh_1342301812_2294P
Content-Type: text/plain; charset=us-ascii

On Sat, 14 Jul 2012 15:14:45 -0500, -Hammer- said:

>     The whole purpose of this is that they do NOT need to be global.
> Security thru obscurity. It actually has a place in some worlds. Does that
> make sense? Or are such V4-centric approaches a bad thing in v6?

The fact that your prefix is a Secret Sauce that isn't known to the rest of
the world won't matter much to an attacker.  One 'ifconfig' on whatever
beachhead machine the attacker has inside your net, and it's not Secret
Sauce anymore, it's just another bottle of Thousand Island dressing...

--==_Exmh_1342301812_2294P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
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=3VTI
-----END PGP SIGNATURE-----

--==_Exmh_1342301812_2294P--



home help back first fref pref prev next nref lref last post