Re: Netfilter (Linux) Does IPv6 NAT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 12/05/2011 18:11, Greg Daley wrote:
> The assumption that information is present only within the IP address is erroneous.
> This has been studied for mobile IPv6 users as well, and there is information leakage up and down the stack.
> 
> We have local source address selection mechanisms in recent Windows versions that use randomized IIDs on outbound connections today.  This doesn't prevent exposure of the information regarding the internal network structure, but nor do firewalls at publically addressed IPv4 institutions today.

This has been covered many times, but once more (with feeling) ...

The problem that 4941 is designed to fix is to avoid being able to track
the same user on *different* networks. This is possible because by
default the host portion of the address remains constant, and
theoretically globally unique.

Privacy for a user that is always connecting through the same network is
a whole different basket of bagels.


Doug

-- 

		[^L]

	Breadth of IT experience, and depth of knowledge in the DNS.
	Yours for the right price.  :)  http://SupersetSolutions.com/

_______________________________________________
Ietf mailing list
Ietf@xxxxxxxx
https://www.ietf.org/mailman/listinfo/ietf


[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Fedora Users]