[170090] in North American Network Operators' Group
Re: IPv6 Security [Was: Re: misunderstanding scale]
daemon@ATHENA.MIT.EDU (Mark Tinka)
Mon Mar 24 02:51:30 2014
From: Mark Tinka <mark.tinka@seacom.mu>
To: nanog@nanog.org
Date: Mon, 24 Mar 2014 08:51:03 +0200
In-Reply-To: <CAFy81rmSOEBVdxfv9PTH2EBeFgsm+VWe91c3nG=QHxndoRNyUA@mail.gmail.com>
Reply-To: mark.tinka@seacom.mu
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--nextPart3992142.hqoejD3ZMN
Content-Type: Text/Plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
On Monday, March 24, 2014 01:37:52 AM Timothy Morizot wrote:
> Yes. As I said, same general sorts of risks for the most
> part as in IPv4. Details differ, but same general types.
> My point was that it's mostly FUD to wave the flag of
> scary new security weaknesses with no mitigations in
> IPv6. It's the same general sort of first hop and link
> security issues that exist in IPv4 with similar
> mitigations. Not identical, but not radically different
> or new either.
While the mitigations may not exist yet (like proper=20
firewalls in CPE to protect GUA'ed devices in the home), it=20
still a good idea to bring the risks to light so folk can=20
think about how to get them fixed.
Mark.
--nextPart3992142.hqoejD3ZMN
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)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=EsYH
-----END PGP SIGNATURE-----
--nextPart3992142.hqoejD3ZMN--
