Mailinglist Archive: opensuse-factory (396 mails)

< Previous Next >
Re: [opensuse-factory] IPV6 privacy in openSUSE
  • From: Nelson Marques <nmo.marques@xxxxxxxxx>
  • Date: Sun, 16 Jan 2011 17:04:05 +0000
  • Message-id: <AANLkTim30k+ccj3GPBXbXjOxu=C3R3tV8U-BoO7g9bwz@mail.gmail.com>
I know this is a bit off topic, but here's something:

http://isoc.org/wp/worldipv6day/

NM

On Sun, Jan 16, 2011 at 4:34 PM, Greg R <corwin@xxxxxxxx> wrote:
On Fri, 14 Jan 2011 05:14:08 -0800, Per Jessen <per@xxxxxxxxxxxx> wrote:

Disclaimer: I probably don't know enough about IPv6 to really comment
here, but nevertheless -

I can see this issue might be relevant for people with 6rd or 6to4
tunnels, but apart from free.fr, it seems that neither one is being
mass-deployed?

The privacy concern is IPv6 automatic configuration. There are two methods
in the RFCs for it. One derives your local-part by doing some well known,
and most importantly reverseable, computations on your MAC address. The
other method (RFC3041) just generates a 64-bit random number. The former
renders predictable addresses, which is handy for address-based ACLs on
devices. The later hides the hardware, and if address-based ACLs are in use
DHCPv6 will need to be used to assign a static address. Windows XP and 2003
at least use the Random generation method, and I'm pretty sure Vista/Win7 do
as well since Microsoft was the author of RFC 3041.

That said, if your IPv6 address is getting scrubbed by a v6 NAT gateway or
you're getting an assignment from DHCPv6 it doesn't matter.

--
Law of Probable Dispersal:
    Whatever it is that hits the fan will not be evenly distributed.
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx





--
nelson marques
nmo.marques@xxxxxxxxx
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx

< Previous Next >