Why IPv6 Security Is So Hard: Structural Deficits of IPv6 & Their Implications

[Aerosol]

They wanted to retain end-to-end paradigm

(which got broken by NAT).

¬ Security was not _that_ important, L4-7 security

in the network was non-existent (firewalls were

usually also proxies).

¬ Bandwidth was _expensive_.

¬ Multihoming (connectivity to 2 or more ISPs) was

virtually non-existent.

¬ They thought they can impose a worldwide

hierarchical addressing scheme (like telephone

system), PI addresses were given out 15+ years

after IPv6 started.

- Which, btw, highlights another aspect:

IETF and registries/policing orgs. are different

organizations, with potentially very different agendas…

Read more: https://www.ernw.de/download/TROOPERS_IPv6SecSummit_ERNW_IPv6_Structural_Deficits.pdf