ietf
[Top] [All Lists]

Re: [Full-disclosure] IPv6 security myths

2010-10-26 17:23:53


On 10/26/2010 3:05 PM, Michael Richardson wrote:
The major*security*  advantage of IPv6 is that it removes 90% of
complexity of IPv4 networks that results from layers of NAT, and then
series of port-forwards through them.


That's an operational hope, not a technical or operational fact.

It is predicated on the belief that small address space is the only reason we have NATs. There's plenty of evidence for additional reasons which IPv6 does not eliminate.

Ergo, your listed major security advantage is on extremely soft ground, possibly qualifying as quicksand...

d/
--

  Dave Crocker
  Brandenburg InternetWorking
  bbiw.net
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf