[ipv6hackers] Is there a telecom company which adpated IPv6 network on LTE?

[Douglas Otis]

On May 28, 2013, at 11:27 PM, 김무성 <disaster at sk.com> wrote:

> One of advantage which deploy ipv6 network on telecom is that all smart-phone can have a public IPv6 address.
> But it cause security problem that hacker can attack smart-phone directly.
> If deploy a NAT6/6 or NAT6/4 device for security, availability of ipv6 is low
> And have to have ALG (Application Layer Gateway) device for providing service. (ex, SIP ALG for VoIP on LTE, etc)
> 
> Is there a solution that use public IPv6 address on smart-phone and strengthen security?

Dear Disaster,

Use of TLS with client authentication offers a practical means to consolidate the threat landscape. Although technically the domain name space can be larger than the massively large IPv6 address space, in practice it is not.  One hundred thousand domains control 90% of Internet traffic out of approximately 100 million domains active each month.  The top 150 domains control 50% of the traffic, and the top 2,500 domains control 75%.  This level of domain consolidation permits effective fast-path white-listing.  Improvements achieved using domains can easily justify added cryptographic authentication burdens as with rfc2560.  Storage requirements are unable to deal with threats by IP address as was possible with IPv4.  Verizon offers IPv6 LTE.

Regards,
Douglas Otis