[ipv6hackers] thc-ipv6 v3.0, IPv6 complexity and evasions

[Jeremy Stanley]

On 2015-10-17 17:26:39 +0200 (+0200), Marc Heuse wrote:
[...]
> and please do not make a joke about oversized UDP packets. with
> DNSSEC this is actually required. and we need DNSSEC. we don't see
> that problem much because companies don't implement it (yet).
[...]

I'm reminded of ECN black holes because of networks blocking
unexpected diffserv options, PMTUd black holes because of networks
blocking all ICMP (including NTF), broken IPSec because of networks
blocking "unusual" IP protocols... the list goes on. In my years as
a network engineer, the story I always got from the offending
network operators was "you're the only one complaining to us about
this so clearly it's not a major problem."
-- 
Jeremy Stanley