Re: [v6ops] IPv6 new access from Windows to Google: display of a critical security alert


> On Oct 31, 2019, at 3:25 AM, Alexandre Petrescu <alexandre.petrescu@gmail.com> wrote:
> 
> Google alerted me a few days ago during my DHCPv6 experiments, when I browsed it with a Windows computer using IPv6 first time, although many times previously with IPv4.
> 
> 
Since I don’t speak French, it’s hard to interpret the error message and I can’t paste the contents of an image into google translate.

> Incidentally, the address my Windows used was an address delivered by DHCPv6.  Being DHCPv6 is visible in its format: in the hextet representation, the '::' appears before the last two hextets (X::b4cc:8eb9) as opposed to a SLAAC address where the double colon appears quasi always before the last _four_ hextets.
> 
> 
Google can’t tell how you got the address. The position of the :: is irrelevant. This is simply an artifact of the UI in question. Any address which contains contiguous hextets of all zeroes (e.g. 0:0:0) may abbreviate one such group of hextets to ::.

Example: 2001:d8b:0:0:53a2:0:0:1 can be written as:
	2001:db8::53a2:0:0:1
	2001:db8:0:0:53a2::1

All three of the above expressions represent the same exact 128-bit address.
> I am trying to understand why Google complained wiht such a critical security alert.
> 
Hard to say. Is the security alert about your address or is it about the site you were trying to visit?
If you can provide an English translation of the message, it might be possible to provide better advice.

> - is it because the address was a DHCP address rather than SLAAC?
> 
No. Google can’t tell how the address was assigned. It’s just another 128 bit number from Google’s perspective.

> - it is because I connect from an address they have never seen before?
> 
Without being able to decipher the error message, it’s hard to say.
> - is it because it is the first time I connect to them by IPv6 on this computer?
> 
Not likely.
> - is it because when I connect  with IPv6 to them I keep changing the IPv6 address (as opposed to IPv4 is always the same because behind NAT)?
> 
Not likely.
> The messages they displayed are not helpful to understand what's happening, because they talk about 'application security', 'wrong device', etc.  Neither is the case: I have a running anti-virus so my apps are healthy and the device is always the same Windows device I use to connect to Google.
> 
Again, without a translation of the full error message, there is not enough information to answer your questions. No guarantee that a translation of the full error message would provide enough information, but probably worth a try.

Owen

> <gapjjmicnkndmmma.jpg>
> 
> _______________________________________________
> v6ops mailing list
> v6ops@ietf.org
> https://www.ietf.org/mailman/listinfo/v6ops