[170087] in North American Network Operators' Group
Re: misunderstanding scale
daemon@ATHENA.MIT.EDU (Mark Tinka)
Mon Mar 24 02:38:56 2014
From: Mark Tinka <mark.tinka@seacom.mu>
To: nanog@nanog.org
Date: Mon, 24 Mar 2014 08:38:27 +0200
In-Reply-To: <532F3783.4080502@ledeuns.net>
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--nextPart10342686.kJ7PFt4NPC
Content-Type: Text/Plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
On Sunday, March 23, 2014 09:35:31 PM Denis Fondras wrote:
=20
> When speaking of IPv6 deployment, I routinely hear about
> host security. I feel like it should be stated that this
> is *in no way* an IPv6 issue. May the device be ULA,
> LLA, GUA or RFC1918-addressed, the device is at risk
> anyway.
>=20
> If this is the only argument for delaying IPv6
> deployment, this sounds more like FUD to me ;-)
I guess it's no surprise that host security is not an IPv4=20
or IPv6 issue.
It's just that with IPv4, the majority of unclean and=20
unupdated hosts have been living behind NAT44.
In an ideal IPv6 world, all hosts have GUA's, and in this=20
case, host security becomes a bigger problem, because now=20
the host is directly accessible without a NAT66 in between=20
(we hope).
Mark.
--nextPart10342686.kJ7PFt4NPC
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)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=PVhM
-----END PGP SIGNATURE-----
--nextPart10342686.kJ7PFt4NPC--
