3 ms·
I also thought that, but the discoverability of internal addresses used to open up new attack vectors like having the users in the same network click to URLs po
by sedatk 2y ago
I also thought that, but the discoverability of internal addresses used to open up new attack vectors like having the users in the same network click to URLs pointing to those internal addresses to exploit them, so, hiding the network topology may not always be solely for obscurity, but for security to some degree too.
- k_roy 2y agoagain though, the fallacy that's repeated over and over again with IPv6 is that just because you have a public IP, suddenly everything is exploitable. If you have an IPv4-only network, you still have firewall and routing. This is what protects your router, allows ports to be forwarded, etc. Literally nothing changes. You still need routing, just not the NAT/PAT part of it. You still need a firewall.
- sedatk 2y agoYeah, no arguments about that. But, maybe, still, don't give your IPv6 devices predictable addresses?