3 ms·
I think this is only really worth the headache for security issues. That said: - HSTS - DNSSEC - IPv6 in that order. I think for a long time, governments ha
by exelius 9y ago
I think this is only really worth the headache for security issues. That said:
- HSTS
- DNSSEC
- IPv6
in that order. I think for a long time, governments had no interest in pushing security and encryption because that would prevent them from mass data collection. I think minds are starting to change around that: poor security is much more likely to be exploited against a government rather than used in its favor (plus all the real criminals now have much better opsec these days so mass surveillance is much less effective).
- rmrfrmrf 9y agoI feel like I need more training for IPv6. For a long time, I've thought that it was a simple thing to enable and allow (and often our servers are dual stack). It turns out, though, that unless you really know what you're doing on the server side (i.e. overriding the horrible defaults for IPv6 resource allocation), you can end up with an inexplicably slow server that spits out bizarre errors. Anyone here have any recommendations on a book, course, etc. that covers IPv6 readiness?
- topranks 9y agoMore on the network side myself, and I thought I had v6 down, or at least the basics. What kind of resource allocation problems did you have on dual-stacked hosts? Windows/Linux/Other??
- rmrfrmrf 9y agoFor example, in Debian 7, routes.max_size is dynamically allocated for ipv4 and hard-coded to 4096 for ipv6. I eventually figured it out after searching for a while, but that's not something I'd expect to have to do (having been used to ipv4 working decently out of the box).
- deleted 9y ago[deleted]