[OPSEC] RFC7359: VPN leakages, roughly ten years later

[Fernando Gont <[e-mail]>]

Folks,

In 2014 we published RFC7354, entitled "Layer 3 Virtual Private Network
(VPN) Tunnel Traffic Leakages in Dual-Stack Hosts/Networks".

One would have probably expected that by now, the problem of VPN
leakages due to lack of IPv6 support would be long gone (?).

However, the problem seems to be pretty current.

e.g., it seem Forticlient fails to support IPv6 for Linux and Apple
platforms. And, what's worse (?), there does not seem to be trivial way
to disable IPv6 on iOS. (i.e., "You cannot win, you cannot break even...
you can't even quit the game).

Any other current examples of this?

P.S.: Wasn't Apple requiring IPv6 support in all apps, anyway? :-?

Thanks,
--
Fernando Gont
Director of Information Security
EdgeUno
PGP Fingerprint: DFBD 63E3 B248 AE79 C598 AF23 EBAE DA03 0644 1531





“This communication is the property of EdgeUno or one of its group companies and/or affiliates. This electronic message contains information which may be privileged or confidential. The information is intended to be for the exclusive use of the individual(s) named above and if you are not the intended recipient be aware that any non-explicitly authorized disclosure, copying, distribution or use of the contents of this information, even if partially, including attached files, is strictly prohibited, and will be considered a criminal offense. Please notify [e-mail] about the unintended receipt of this electronic message and delete it.”