nanog mailing list archives

Re: using "reserved" IPv6 space


From: valdis.kletnieks () vt edu
Date: Sat, 14 Jul 2012 17:36:52 -0400

On Sat, 14 Jul 2012 15:14:45 -0500, -Hammer- said:

    The whole purpose of this is that they do NOT need to be global.
Security thru obscurity. It actually has a place in some worlds. Does that
make sense? Or are such V4-centric approaches a bad thing in v6?

The fact that your prefix is a Secret Sauce that isn't known to the rest of
the world won't matter much to an attacker.  One 'ifconfig' on whatever
beachhead machine the attacker has inside your net, and it's not Secret
Sauce anymore, it's just another bottle of Thousand Island dressing...

Attachment: _bin
Description:


Current thread: