From owner-freebsd-net@FreeBSD.ORG Tue Jun 10 12:42:05 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2EA711065671 for ; Tue, 10 Jun 2008 12:42:05 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: from ibctech.ca (v6.ibctech.ca [IPv6:2607:f118::b6]) by mx1.freebsd.org (Postfix) with SMTP id BF49A8FC1C for ; Tue, 10 Jun 2008 12:42:04 +0000 (UTC) (envelope-from steve@ibctech.ca) Received: (qmail 30535 invoked by uid 89); 10 Jun 2008 12:42:34 -0000 Received: from unknown (HELO ?IPv6:2607:f118::5?) (steve@ibctech.ca@2607:f118::5) by 2607:f118::b6 with ESMTPA; 10 Jun 2008 12:42:34 -0000 Message-ID: <484E7718.9050607@ibctech.ca> Date: Tue, 10 Jun 2008 08:44:08 -0400 From: Steve Bertrand User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: Randy Bush References: <484E0C08.1060800@FreeBSD.org> <484E3119.4060102@psg.com> In-Reply-To: <484E3119.4060102@psg.com> X-Enigmail-Version: 0.95.6 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, Doug Barton , so@freebsd.org Subject: Re: Proposal: Enable IPv6 Privacy Extensions (RFCs 3041/4941) by default X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Jun 2008 12:42:05 -0000 Randy Bush wrote: >> To address those privacy concerns RFC 3041 was written, and eventually >> obsoleted by RFC 4941. ftp://ftp.rfc-editor.org/in-notes/rfc4941.txt >> Our IPv6 implementation comes with the code to enable this feature, >> but by default it is turned off. My proposal is to enable it by >> default, and give the user a knob in rc.conf to turn it off. > > the only drawback is that forward and reverse dns would not be easily > filled. but anyone who relies on a mac address for dns hacking is > asking for trouble; use dhcpv6 or hard code the host's ip address in > /etc/rc.conf. DNS in this context is really of least concern, and there are simple ways around that as Randy states. I would think that enabling IPv6 Privacy Extensions by default would have no worse effect on a host in regards to DNS than a similar situation with IPv4 Auto Configuration. > so i have no problem with the change. thanks for asking. I also support following the specification by default. Steve