4 ms·
I guess this won't/can't protect web services on private networks that nonetheless.use public routable address space? What about IPv6, both public routable add
by yrro 5y ago
I guess this won't/can't protect web services on private networks that nonetheless.use public routable address space?
What about IPv6, both public routable address space and ULA space?
- tommiegannert 5y agoI was also curious about IPv6 non-local scopes. The spec linked in the article says > User Agents MAY allow certain IP address blocks' address space to be overridden through administrator or user configuration. This could prove useful to protect e.g. IPv6 intranets where most IP addresses are considered public per the algorithm above, by instead configuring user agents to treat the intranet as private. https://wicg.github.io/private-network-access/#ip-address-space-heading https://wicg.github.io/private-network-access/#ip-address-sp... So aside from loopback and link-local, the only effect this will have on IPv6 is what the browser decides to do. If that's a manual add/remove or a look into the routing table seems unspecified.
- yrro 5y agoAh, I missed the spec link and landed on the design documentation... So I will have to wait to see what form this configuration takes. Hang on a minute, this is suddenly sounding rather familiar--I'm suddenly reminded of the Internet control panel in Windows, which lets you assign web sites to different zones (internet, LAN, trusted, restricted)...