netdev - Re: [PATCH] ipv6 addrconf: source address selection, Rule 7: Prefer temporary addresses (RFC 6724)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Wed, 4 Dec 2013 06:29:46 -0800 (PST)
From:	François-Xavier Le Bail <fx.lebail@...oo.com>
To:	David Miller <davem@...emloft.net>
Cc:	netdev@...r.kernel.org, kuznet@....inr.ac.ru, jmorris@...ei.org,
	yoshfuji@...ux-ipv6.org, kaber@...sh.net
Subject: Re: [PATCH] ipv6 addrconf: source address selection, Rule 7: Prefer temporary addresses (RFC 6724)

> On Monday, December 2, 2013 2:25 AM, David Miller <davem@...emloft.net> wrote:

>> From: fx.lebail@...oo.com
>> Date: Mon, 25 Nov 2013 17:16:45 +0100
>>  The RFC 6724 change the default recommendation for source address selection
>>  Rule 7 to prefer temporary addresses rather than public addresses,
>>  while providing an administrative override.
>>
>>  The administrative override is based on the prefer_src_public sysctl.
>>
>>  Signed-off-by: Francois-Xavier Le Bail <fx.lebail@...oo.com>
>
> I think we need to preserve existing behavior, but this patch does not
> do that.
>
> Sorry, I can't apply this.
>
> If someone was depending upon the old preferencing in some way, we will
> break communications for them, and that really isn't acceptable.
>
> It's really ill advised for the RFC folks to create situations like
> this, where implementations have to choose between following the
> updated RFC to the letter and keeping existing setups working.

The change is explained here: http://tools.ietf.org/html/rfc6724#appendix-B

“ This change was made because of the increasing
  importance of privacy considerations, as well as the fact that
  widely deployed implementations have preferred temporary
  addresses for many years without major application issues.”

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html