
| Msg # 933 of 1179 on ZZLI4422, Tuesday 11-03-25, 3:48 |
| From: JEREMY STANLEY |
| To: STEPHAN SEITZ |
| Subj: Re: Finishing deprecation of isc-dhcp-cl |
From: fungi@yuggoth.org On 2025-11-03 13:29:35 +0100 (+0100), Stephan Seitz wrote: [...] >From a security point of view I find it very wrong that the kernel >configures the interface with IPv6 if the administrator doesn€€€t >have configured anything IPv6 related for the interface. After all >you won€€€t get any working IPv4 address without a configuration >either. [...] A primary design goal for IPv6 was plug'n'play zeroconf-type automated setup of networks: connect computers and routers into switches and have them figure out for themselves how to route traffic by default without need of user/administrator intervention. Basically, it was an identified failing of IPv4 that too much configuration was required, and that the successor should "just work" out of the box in simple environments with basic needs. This is why essentially all operating systems have IPv6 on by default, with SLAAC or similar address coordination, neighbor discovery, route advertisements, and so on. The Linux kernel is no different in this regard. -- Jeremy Stanley -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmkI8O1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ WClttQ//akCV+ksM0V/IkVCj1YJduRN1rfOSf1DX4OMwMPfUsfQTAucLp4LQ4m0A pI6gJhvDxOyDV4rjQbax+w3iTi4GZHKmaPb6GMCbT/Orv4b0JGEPcTyhvduMogwT 9cZlcRZ4DN1CaBjWoxUYjpoobrrK0ZiRqikXeVfuWMhbaxLn0VDVQK65q+A9Xkl8 5lbJTNlvIbEA3syb/5LzTFUqKZC7owY/OrolJhm1XKc2g0jM8Ujv4l8t/IJrQ4P7 mgwWm7eg1WlIg5/l0AueLHrNyyRiyvMtsD0+hGG5GykZ/k5+1khuxl6ycRad3Kqa eW1x0+XzkuYwmkZmLYZY/EI43ds8H22+kMU9+ThNCDG20038oS+0chgnM9NMwlvB jVWs2pC9Yy1iPxmJ1FeT82dFbeCLIhD9quNqS6VTm0TJWsTtjR5H3Hx/0laQ08+O /D0uiVOWHbXFIVuZPUEy5LKqMsTXJdg66emwnhISNYUrlwLHUM86cb2dftHq4/15 sb3wYUnQmWDMlAmhAdregG7+SyjGxAlKjErs7qw9kQf+OcPR9F9b6bJP6MViaeBk ZXg//JwF/1nMUsvszph4vFclU+pQi52rxtiktUSpP0w3FPQuCVClNypCJeZtVPEV L+HwyLX7YzXwBEfCXfkiofIo0S5AQ92xJNOzAOlVJYkDaRKgdoQ= =buKH -----END PGP SIGNATURE----- --- SoupGate-Win32 v1.05 * Origin: you cannot sedate... all the things you hate (1:229/2) |
328,090 visits
(c) 1994, bbs@darkrealms.ca