Re: [opensuse-factory] IPV6 privacy in openSUSE

I know this is a bit off topic, but here's something: http://isoc.org/wp/worldipv6day/ NM On Sun, Jan 16, 2011 at 4:34 PM, Greg R wrote:

On Fri, 14 Jan 2011 05:14:08 -0800, Per Jessen wrote:

...

Disclaimer: I probably don't know enough about IPv6 to really comment here, but nevertheless -

I can see this issue might be relevant for people with 6rd or 6to4 tunnels, but apart from free.fr, it seems that neither one is being mass-deployed?

The privacy concern is IPv6 automatic configuration. There are two methods in the RFCs for it. One derives your local-part by doing some well known, and most importantly reverseable, computations on your MAC address. The other method (RFC3041) just generates a 64-bit random number. The former renders predictable addresses, which is handy for address-based ACLs on devices. The later hides the hardware, and if address-based ACLs are in use DHCPv6 will need to be used to assign a static address. Windows XP and 2003 at least use the Random generation method, and I'm pretty sure Vista/Win7 do as well since Microsoft was the author of RFC 3041.

That said, if your IPv6 address is getting scrubbed by a v6 NAT gateway or you're getting an assignment from DHCPv6 it doesn't matter.

-- Law of Probable Dispersal:     Whatever it is that hits the fan will not be evenly distributed. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org

-- nelson marques nmo.marques@gmail.com -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org