[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: On saving end-to-end transparency

To: Marco Hogewoning <marcoh@marcoh.net>
Subject: Re: On saving end-to-end transparency
From: Rémi Després <remi.despres@free.fr>
Date: Tue, 23 Mar 2010 10:41:31 -0700
Cc: IPv6 v6ops <v6ops@ops.ietf.org>, Gert Doering <gert@space.net>, Fred Baker <fred@cisco.com>, Mark Townsley <townsley@cisco.com>, Mohacsi Janos <mohacsi@niif.hu>
In-reply-to: <5C44A45B-B6DF-486E-9210-C44A72049E50@marcoh.net>
References: <4BA78BE7.6010005@cisco.com> <D543E465-CC85-4F2E-B794-A7B457AA0D28@cisco.com> <20100322160911.GU69383@Space.Net> <alpine.BSF.2.00.1003231426310.74067@mignon.ki.iif.hu> <F6008F79-C5C1-4DA9-8E52-94AB8A80DAB8@free.fr> <5C44A45B-B6DF-486E-9210-C44A72049E50@marcoh.net>

Le 23 mars 2010 à 08:45, Marco Hogewoning a écrit :

> So for now dropping all inbound connections feels good, expecially if we want the masses to start using IPv6 fast.

The fastest IPv6 deployment for masses took place 2 years ago (RFC 5569)
The main perceivable advantage of enabling IPv6, in addition to IPv4, was and still is direct inbound connectivity (used in particular with BitTorrent).
Purposely eliminating this advantage would create a legitimate reason to remain IPv4-only.

  
> And yes there should be an easy button in that CPE/RG to disable that firewall and yes it should come with a BIG warning about the risks they just took.

The conclusion has been in my understanding that vendors will chose which is their default mode.


Regards,
RD

References:
- On saving end-to-end transparency (was: Re: I-D.ietf-v6ops-cpe-simple-security-09)
  - From: Mark Townsley <townsley@cisco.com>
- Re: On saving end-to-end transparency (was: Re: I-D.ietf-v6ops-cpe-simple-security-09)
  - From: Fred Baker <fred@cisco.com>
- Re: On saving end-to-end transparency (was: Re: I-D.ietf-v6ops-cpe-simple-security-09)
  - From: Gert Doering <gert@space.net>
- Re: On saving end-to-end transparency (was: Re: I-D.ietf-v6ops-cpe-simple-security-09)
  - From: Mohacsi Janos <mohacsi@niif.hu>
- Re: On saving end-to-end transparency
  - From: Rémi Després <remi.despres@free.fr>
- Re: On saving end-to-end transparency
  - From: Marco Hogewoning <marcoh@marcoh.net>

Prev by Date: Re: On filibusters as a mode of technical discussion
Next by Date: Re: On filibusters as a mode of technical discussion
Previous by thread: Re: On saving end-to-end transparency
Next by thread: Re: On saving end-to-end transparency (was: Re: I-D.ietf-v6ops-cpe-simple-security-09)
Index(es):
- Date
- Thread