[ipv6hackers] IPv6 security (slides and training)

[Douglas Otis]

On 11/11/11 2:40 PM, Doug Barton wrote:
> > I think that the IPv4 folks will quickly have problems
> > communicating with
> >> their partners and customers running IPv6.
>  ... which is one of the big motivations to not be a first-mover to
>  IPv6 in the first place.
>
Doug,

Disagree.  These partners also likely represent the land of 
opportunity.  Rather than receiving a growing portion of traffic over 
LSNs, offering IPv6 connectivity conveys better information when 
deciding which exchanges to permit.  In addition, direct access better 
prevents MitM and broken double NAT issues.

Anyone trusting local-networks not protected by some form of 
certification and cryptography are also likely compromised even though 
their status lights all show green.  Once properly secured, which should 
happen anyway, IPv6 offers many advantages over IPv4.  The paradigm that 
networks can be secure by being hard on the outside and soft and chewy 
in the middle should by now be considered the real myth.

-Doug