Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yeah, my ISP does an IPv4 (static is an extra cost) and a full IPv6 /56 assignment.

Beyond that, though, I think a lot of the fundamentalism around "IPv6 should mean everything is always available, if you don't like that get gud at network security" has been incredibly counter-productive. IPv4 NAT has given a certain level of network security to consumers, and IPv6 defaulting to always-on, all-the-time is not a comforting story.



But the same class of device that currently provides NAT to the end user could just as easily provide a default-deny firewall. It's not as though it's easier for Netgear to implement NAT than a basic firewall.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: