[ipv6hackers] Windows 7/2008 R2 Improved Resilliency to IPv6 Floods

Owen DeLong owend at he.net
Sun Apr 14 03:48:03 CEST 2013


On Apr 13, 2013, at 14:18 , Jim Small <jim.small at cdw.com> wrote:

> Owen,
> 
> FWIW, I don't think anyone here is against deploying IPv6.  We need to deploy.

That is not what is reflected by snarks such as "everything is oh so IPv6 ready..."

> At the same time though, we need to have a candid discussion about the problems with IPv6 and how to fix them.  I also think that it's human nature to resist change without some pain.  So it's important that Marc is constantly applying pressure to make sure the problems are getting fixed.  And while Marc is showing what's broken, Fernando has well thought out ideas on how to update the standards.

I believe that's what I said.

> I would in fact argue that Fernando is working to facilitate the secure and simple deployment of IPv6.  Why does someone need to attend hours of security training talking about obscure fragmentation vulnerabilities?  The standards should be fixed so that the protocol is as plug and play as possible.  So in my view, Fernando and Marc are helping to ease the operational burden of IPv6.  By pushing for the right fixes it will improve the return on investment for our global network.

I've never disagreed with this.

Owen




More information about the Ipv6hackers mailing list