Re: [v6ops] [EXTERNAL] Re: Improving ND security

[Philip Homburg <[e-mail]>]

>    Thanks for your opinion, Ed, but it does not apply for the OMNI
>    use case because
> 
>    the keys only need to be known to a fixed (and finite) set of
>    Servers which can
> 
>    keep in sync via a shared filesystem. 

Maybe we should first look at which application domains we want to discuss.
For most people, if you have a fixed set of servers connected to a single
LAN, then you typically don't have a security problem with ND. Of course,
there could still be networks where ND security is an issue even if all
devices are known.

I think the common case for ND security issues is a an ethernet (or
ethernet-like wifi) where untrusted devices can connect. However for
the common case where bridges just accept any MAC address, what prevents
the attacker from sending packets with the MAC address of a victim?

Of course there is the special case where bridges lock the MAC addresses of
devices connected to ports, but in those cases, bridges could also lock the
IPv6 address and otherwise limit ND traffic.

The easiest way to solve the issue for small networks is to give each host
a private vlan. The would break multicast, but multicast in an untrusted 
environment is probably not such a great idea anyhow.