4 ms·
> There is no downside to everything to be globally routable. Yes there is. I sure as fuck don't want random people from the Internet to know how many devices
by otabdeveloper4 4y ago
> There is no downside to everything to be globally routable.
Yes there is. I sure as fuck don't want random people from the Internet to know how many devices and what kind populate my home LAN.
- rixthefox 4y agoIf an adversary knowing your IP address scheme it’s so bad to you, you’re not doing it right. Security through obsecurity is not security.
- jddj 4y agoI wonder if whoever coined that phrase knew that it would be used so often in contexts where people want both obscurity and security based on their own respective merits.
- otabdeveloper4 4y ago> Security through obsecurity is not security. Yes, let's just flash a giant "welcome, nobody is home right now" sign to burglars whenever you leave the house unlocked.
- bert64 4y agoHow is anyone going to discover that? You're going to have a minimum of a /64, noone is going to scan that looking for devices. Even if they do, your firewall is not going to allow the traffic unless you've explicitly configured it to do so. The only way someone will discover devices, is by analysing outbound traffic you make. Outbound IPv6 traffic will come from randomised addresses so the addressing information is useless. Other things disclosed by the devices (eg user-agent headers on web browsers and other fingerprintable data) are protocol agnostic.
- sgjohnson 4y agonobody in our lifetimes is going to scan a single /64 of IPv6.