4 ms·
In fact Chrome is doing just that: https://developer.chrome.com/blog/private-network-access-preflight/ https://developer.chrome.com/blog/private-network-access
by oefrha 4y ago
In fact Chrome is doing just that:
https://developer.chrome.com/blog/private-network-access-preflight/ https://developer.chrome.com/blog/private-network-access-pre...
https://wicg.github.io/private-network-access/ https://wicg.github.io/private-network-access/
- teraflop 4y agoThat's a defense-in-depth measure; it can't be relied on. The exact same attack can be used against targets on a corporate network that doesn't use the RFC1918 address ranges.
- fulafel 4y agoI wouldn't associate those mainly with corporate networks. The prevalence of RFC1918 use is an artifact of IPv4 and address shortage. IPv6 usage is already at 40% today. Also hosts are increasingly multihomed, devices are likely tohave 2-3 network interfaces, with v4/v6 addresses for each. VPNs are run in "split tunnel" mode where some traffic goes via VPN and some not, so both un-tunneled and tunneled traffic is allowed simultaneously, etc.