[AusNOG] Good article on the IPv6 address security related IETF work over the past 10 years.

[Mark Smith]

The change from MAC address based stable IPv6 addresses is probably the
most significant, as described in RFC7217, and becoming the recommended
default for SLAAC in RFC8064.

If router vendors implement RFC7217, the concern about swapping a network
interface module, and the router's IPv6 address changing, because the MAC
address changes, goes away.

I haven't had a chance to look, however somebody from Cisco told me a few
years back that they'd implemented RFC7217 for the HSRP floating link-local
address.

https://www.si6networks.com/
<https://www.si6networks.com/2020/08/06/a-brief-history-of-recent-advances-in-ipv6-security-part-i/>
2020/08/06/a-brief-history-of-recent-advances-in-ipv6-security-part-i/
<https://www.si6networks.com/2020/08/06/a-brief-history-of-recent-advances-in-ipv6-security-part-i/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20200815/67db1c4a/attachment.html>