Re: IPv6 only host NAT64 requirements?

[JORDI PALET MARTINEZ <[e-mail]>]

That tunneling technology is 464XLAT, depending on how you deploy it:

https://datatracker.ietf.org/doc/draft-palet-v6ops-464xlat-deployment/

Regards,
Jordi
 

-----Mensaje original-----
De: ipv6 <[e-mail]> en nombre de Philip Homburg <[e-mail]>
Responder a: <[e-mail]>
Fecha: martes, 14 de noviembre de 2017, 6:11
Para: <[e-mail]>
Asunto: Re: IPv6 only host NAT64 requirements?

    >I am not optimistic on the demand / need / value of dnssec in any scenario
    >....let alone an ipv6-only host validating an ipv4-only dns name. If the
    >folks operating this service cared, they could operate the server with
    >signed v6 names.  It is more reasonable in todays internet to asked the
    >server (lets assume most signed name scenarios are servers) to be setup
    >right (with v6). There is not a compelling reason why having v6 is
    >unattainable today for named nodes.
    
    DNSSEC is something that works today. Opinions are divided on what security
    it offers. Some people like it way more than the traditional CA system. 
    Other people believe that we should continue making random changes to the CA
    system in the hope that one day it will be secure.
    
    The problem for people who do local DNSSEC validation is that if neither the
    NAT64/DNS64 operator nor the operator of the target server cares about 
    DNSSEC/IPv6 then it just breaks.
    
    If all server operators cared, then there would be no need for NAT64/DNS64
    so the problem would not exist in the first place.
    
    If the NAT64/DNS64 operator cared, then they would offer be dual stack IPv4
    or a tunneling based transition technology that doesn't break DNSSEC.
    
    I guess the good news is that at least one group of people writing a local
    DNSSEC validating resolver (getdns) are aware of this issue and are adding
    code to handle this situation.
    
    
    --------------------------------------------------------------------
    IETF IPv6 working group mailing list
    [e-mail]
    Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
    --------------------------------------------------------------------
    



**********************************************
IPv4 is over
Are you ready for the new Internet ?
http://www.consulintel.es
The IPv6 Company

This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and further non-explicilty authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited and will be considered a criminal offense. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, will be considered a criminal offense, so you must reply to the original sender to inform about this communication and delete it.