From owner-freebsd-net@FreeBSD.ORG  Tue Jun 10 07:45:31 2008
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3B21C106567F;
	Tue, 10 Jun 2008 07:45:31 +0000 (UTC) (envelope-from randy@psg.com)
Received: from rip.psg.com (rip.psg.com [IPv6:2001:418:1::39])
	by mx1.freebsd.org (Postfix) with ESMTP id 1C8BC8FC12;
	Tue, 10 Jun 2008 07:45:31 +0000 (UTC) (envelope-from randy@psg.com)
Received: from [202.214.86.146] (helo=rmac.psg.com)
	by rip.psg.com with esmtpsa (TLSv1:AES256-SHA:256)
	(Exim 4.69 (FreeBSD)) (envelope-from <randy@psg.com>)
	id 1K5yXq-000Ei3-Le; Tue, 10 Jun 2008 07:45:30 +0000
Message-ID: <484E3119.4060102@psg.com>
Date: Tue, 10 Jun 2008 16:45:29 +0900
From: Randy Bush <randy@psg.com>
User-Agent: Thunderbird 2.0.0.14 (Macintosh/20080421)
MIME-Version: 1.0
To: Doug Barton <dougb@FreeBSD.org>
References: <484E0C08.1060800@FreeBSD.org>
In-Reply-To: <484E0C08.1060800@FreeBSD.org>
X-Enigmail-Version: 0.95.6
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Cc: freebsd-net@freebsd.org, so@freebsd.org
Subject: Re: Proposal: Enable IPv6 Privacy Extensions (RFCs 3041/4941) by
 default
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jun 2008 07:45:31 -0000

> To address those privacy concerns RFC 3041 was written, and eventually
> obsoleted by RFC 4941. ftp://ftp.rfc-editor.org/in-notes/rfc4941.txt
> Our IPv6 implementation comes with the code to enable this feature,
> but by default it is turned off. My proposal is to enable it by
> default, and give the user a knob in rc.conf to turn it off.

the only drawback is that forward and reverse dns would not be easily
filled.  but anyone who relies on a mac address for dns hacking is
asking for trouble; use dhcpv6 or hard code the host's ip address in
/etc/rc.conf.

so i have no problem with the change.  thanks for asking.

randy