Margaret,

> Margaret Wasserman wrote:
> You have made a statement that the use of IPv6
> site-local addresses (as opposed to globally
> unique addresses) will increase the security
> of a private network.  And, I still don't
> understand the basis for that claim.

Semantics: I would have said "globally routable" instead of "globally
unique", as some mechanisms such as including the ASN in the upper bits
of a site-local address could make it globally unique and not globally
routable. That being said, the reasons the mechanism mentioned above has
not convinced is because it was a disguised globally routable address
anyway.


> Could you please answer the following question
> that I posted earlier?

I have. Shall I expect a response, or is what Richard and I have posted
enough to convince you that there are indeed some security benefits in
using site-local address when designing a security perimeter in a
private network?

Michel.


--------------------------------------------------------------------
IETF IPng Working Group Mailing List
IPng Home Page:                      http://playground.sun.com/ipng
FTP archive:                      ftp://playground.sun.com/pub/ipng
Direct all administrative requests to [EMAIL PROTECTED]
--------------------------------------------------------------------

Reply via email to