←back to thread

The IPv6 Transition

(www.potaroo.net)
215 points todsacerdoti | 3 comments | | HN request time: 0.004s | source
Show context
kalleboo ◴[] No.41893589[source]
The internet stopped being a network of peers where everyone needed an address and is now a split into producers (a handful of large companies) and consumers (everyone else).

The consumers are not expected to need a public address where they can be reached - in fact, having a public address is actually a security and privacy risk.

replies(3): >>41893910 #>>41898097 #>>41898172 #
bigstrat2003 ◴[] No.41898097[source]
> in fact, having a public address is actually a security and privacy risk.

I strongly disagree with this. Privacy (not that it's a big deal imo) is well handled by the temporary address extension, and security is not an issue if you run a firewall. And you should be running a firewall even if you use v4, because NAT is not an acceptable security measure.

replies(1): >>41898489 #
FridgeSeal ◴[] No.41898489[source]
Whilst I agree with you, I rather depressingly suspect a lot of people equate NAT with “security”.
replies(2): >>41899377 #>>41901876 #
1. jiggawatts ◴[] No.41899377{3}[source]
Only CG-NAT provides any semblance of "privacy" from the perspective of the outside world, but is a hideous technology that shouldn't exist.

Normal NAT as seen with home internet routers provides zero privacy, because you still have a predictable public IP.

People also think that IPv4+NAT provides security, but IPv4 is such a tiny address space that all public IPs are scanned daily by various malicious bots. Meanwhile IPv6 is so enormous that unless you register your address in some public way, you're completely invisible to port-scanning bots by default!

replies(1): >>41899937 #
2. FridgeSeal ◴[] No.41899937[source]
Yeah exactly.

I have a friend who works in the networking division of a telco in my country, their team had to spend significant time and effort educating a PM who was dead-to-rights convinced that IPv6 was “less secure” and seemed to think that IPv6 didn’t have subnets and that NAT’s were the same as firewalls and refused to be convinced otherwise.

People like that make any forward progress extremely difficult.

replies(1): >>41900024 #
3. jiggawatts ◴[] No.41900024[source]
It's such a perfect example of erroneous thinking that it should be included in psychology textbooks.

"A always comes with B, hence A is required to provide B" is obviously, trivially wrong, but a truly incredible number of people will dig their heels in and refuse to admit that "B can be provided in other ways".

In this case where things went wrong was that: "Before A the availability B was rare, and A requires B, and hence B become commonplace only because of A."

You can see how the association can be accidentally upgraded to an "if and only if" instead of merely "if".