[ipv6hackers] Security/Privacy Improvements to stable SLAAC addresses

[Enno Rey]

Hi,

usually you can just scroll down to read those articles.

best

Enno

On Fri, Jun 30, 2017 at 08:06:13PM +0000, Torbj??rn Ekl??v wrote:
> You have to register to techtarget to read them so please continue other way.
> 
> /tobbe
> 
> > 29 juni 2017 kl. 06:53 skrev Fernando Gont <fgont at si6networks.com>:
> > 
> > Folks,
> > 
> > It looks like somehow I forgot to send a heads-up to this list regarding
> > the following:
> > 
> > Earlier this year RFC8064 as published, recommending use of RFC7217 fr
> > the generation of stable addresses with SLAAC, and recommending
> > *against* the generation of stable addresses by embedding MAC addresses
> > in the Interface-ID
> > 
> > At the time of this writing, at least two OSes already ship with RFC7217
> > enabled by default:
> > 
> > * Fedora
> > * Mac OS
> > 
> > I've written two articles on this topic for TechTarget, which provide
> > both background/context info on the topic, and also discuss practical
> > considerations.
> > 
> > * Part #1:
> > <http://searchsecurity.techtarget.com/tip/IPv6-update-A-look-at-the-security-and-privacy-improvements>
> > 
> > * Part #2:
> > <http://searchsecurity.techtarget.com/tip/How-to-use-an-interface-identifier-to-check-for-IPv6-network-updates>
> > 
> > Thanks!
> > 
> > Best regards,
> > --
> > Fernando Gont
> > SI6 Networks
> > e-mail: fgont at si6networks.com
> > PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
> > 
> > 
> > 
> > 
> > _______________________________________________
> > Ipv6hackers mailing list
> > Ipv6hackers at lists.si6networks.com
> > https://lists.si6networks.com/mailman/listinfo/ipv6hackers
> 
> 
> 
> 
> Torbj??rn Ekl??v | Interlan Gefle AB
> Norra Kungsgatan 5, 803 20 G??vle
> V??xel: 026-18 50 00 | Direkt: 070-683 51 75
> http://www.dnssecandipv6.se <http://www.dnssecandipv6.se/>
> 
> "Ever since I can remember I always wanted to use IPv6.
> To me that was better than being president of the United States.
> To use IPv6 was to own the world."
> 
> _______________________________________________
> Ipv6hackers mailing list
> Ipv6hackers at lists.si6networks.com
> https://lists.si6networks.com/mailman/listinfo/ipv6hackers

-- 
Enno Rey

ERNW GmbH - Carl-Bosch-Str. 4 - 69115 Heidelberg - www.ernw.de
Tel. +49 6221 480390 - Fax 6221 419008 - Cell +49 173 6745902 

Handelsregister Mannheim: HRB 337135
Geschaeftsfuehrer: Matthias Luft, Enno Rey

=======================================================
Blog: www.insinuator.net || Conference: www.troopers.de
Twitter: @Enno_Insinuator
=======================================================