Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You could, but does your device actually do so? Are you confident that 100% of the devices you own use privacy addresses and do not leak non-privacy addresses?

The nice thing about IPv4 NAT is that you plug a single gadget in to your ISP's connection (cable modem, ONT, whatever), you connect your devices to that gadget, and it works out of the box and has all the security properties you'd expect, even if you're a person who hasn't ever thought about security properties and doesn't know what IP is and is still running Windows XP because your word processor still works fine. It might be unclean, but the benefits of this model are immense.



> Are you confident that 100% of the devices you own use privacy addresses and do not leak non-privacy addresses?

I've heard stories, but I've never seen a modern operating system without privacy extensions in the wild. Maybe XP, but did XP have IPv6 enabled by default? As far as I know it didn't.


Most operating systems default to using Privacy Extensions which will cycle your address at frequent intervals, unless you specifically disable it.


One problem with IPv4 is that each interface can only have one IP. With IPv6 an interface can have many! For example both a private and a public IP address!


?? multiple IPv4 addresses work fine... ip addr add 192.0.2.2 dev eth0

It's true that IPv6 requires IP stacks to support this, but nothing in IPv4 prevents IP stacks from supporting it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: