Re: [v6ops] RFC7217 and flash renumbering and IID change

Or just use PCP and authenticate the request.

> On 14 Dec 2020, at 22:04, Philip Homburg <pch-ipv6-ietf-7@u-1.phicoh.com> wrote:
> 
>> So we're back to each host deciding on the security policy for the network - n
>> ot a network admin (as a proxy for the owners of the site/network).
>> 
>> I make a point of disabling upnp as one of the first steps when setting up a n
>> etwork. Who wants ${random device which may or may not be "friendly"} to be ab
>> le to determine what traffic is allowed into the network - it's not like there
>> is anyone out there in the wild west of the internet who'd have any hostile i
>> ntent :-/
> 
> There are a numbering of things that could be done:
> - Use DHCPv6 IA_NA instead of SLAAC
> - Have a provisioning system that provides each host with a static address.
> - Bring back EUI-64. For systems with static addresses, EUI-64 works just
>  fine.
> - Define yet another pseudo-random IID. This time one where the IID remains
>  constant over the lifetime of the system.
> 
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list
> ipv6@ietf.org
> Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: marka@isc.org