Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's a very interesting view and the closest thing that I've seen to date for a practical, workable solution to the current mess.

I really like that.

How are RBLs and other useful internet institutions that work on the basis of IPv4 addresses along the way with their IPv6 adoption?



I also wondered about this and any throttling-based protection / rate limiting based on IP. With IPv6 the address space is huge and makes blacklists far less effective (or much more memory consuming and slow, but that's something that can be resolved with things like Bloom Filters I imagine).

It would take some time to adapt implementations. I speculate this gives attackers some opportunities to use old-style hacks that were largely mitigated, but suddenly re-appear with IPv6.


My guess is blacklistings will just expand netblock size if ineffective, much like they do on IPv4 in a limited manner now, just on a larger scale.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: