nanog mailing list archives

Re: Mac OS X 10.7, still no DHCPv6


From: Doug Barton <dougb () dougbarton us>
Date: Sun, 27 Feb 2011 15:17:15 -0800

On 02/27/2011 14:39, Mark Andrews wrote:
DHCP kills privacy addresses.
DHCP kills CGAs.

In some environments that's a feature. :)

Also, I think people forget the original motivation behind privacy addresses. If you use RA/SLAAC on every different network that you use IPv6 (say, with your laptop) then the bottom 64 bits are always going to be the same. The theory was that this could provide a way to track the same user across multiple networks, thus the desire to have the ability to generate host identifiers that are "unique-but-temporary."

If you're on your home network (where the network prefix is always going to be the same) privacy addresses have limited (although non-zero) utility. If you're at work you're subject to the policies there, and if they say "dhcpv6 + no privacy addresses" then that's that.


hth,

Doug

--

        Nothin' ever doesn't change, but nothin' changes much.
                        -- OK Go

        Breadth of IT experience, and depth of knowledge in the DNS.
        Yours for the right price.  :)  http://SupersetSolutions.com/



Current thread: