From: David Prall (dcp@dcptech.com)
Date: Wed Dec 14 2005 - 14:37:04 GMT-3
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Yes IPv4 has mobility, but it is triangulated. IPv6 has direct mobility, although some people want it to remain triangualted.
David
- --
David C Prall dcp@dcptech.com http://dcp.dcptech.com
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
> Behalf Of James Ventre
> Sent: Wednesday, December 14, 2005 11:52 AM
> To: David Prall
> Cc: 'CCIEin2006'; 'Bobby Acker'; ccielab@groupstudy.com;
> security@groupstudy.com
> Subject: Re: Is IPv6 more secure than IPv4 ?
>
> IPv4 has mobility too: RFC3344
>
> http://www.ietf.org/html.charters/mip4-charter.html
>
> James
>
>
>
>
> David Prall wrote:
> > IPv6 with end-to-end IPSec has the same issues that IPv4
> has with this. It
> > requires a PKI infrastructure to properly support it. Once it is
> > implemented, I can now transfer my virus without IDS/IPS
> being able to look
> > into it. So now I have to have Host Based IDS/IPS to look
> into everything as
> > well. NAT being a security tool isn't all that compelling
> when I can send an
> > email to an end-user, they open that email and it goes out
> connects to a web
> > server, run a java or activex applet and tell me that they
> are using an
> > RFC-1918 address, yet my web server can tell that they are
> being NAT'd to
> > such and such address. Using end-to-end IPv6 addresses
> requires the same
> > security as IPv4. IPv6 adds things like mobility, which truly scares
> > security people.
> >
> > David
> >
> > --
> > David C Prall dcp@dcptech.com http://dcp.dcptech.com
>
> ______________________________________________________________
> _________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.3 (Build 2932)
iQEVAwUBQ6BYQIYwPzEDHVgLAQg+sggAweFGYNbBisPmtnTa3stBdOYlmrpPOqWw
GSInrDUByi3JlckYoCP3En/quD/eh6GCp00foVy6DhYqeKPFEUqzVRLc6ziRQKWe
pO8NDSe7+MCs5AdGnrr+Mbzwg6DJ600KnaLMw6hQsnUzH458Codffs2hYRNb8Wjl
uJx9K3uWLyhhkqGZEaXqbQaqt0HifddRoOS/QLAmf9CbcSedH5efomV7W3EK8Ukd
AVNOIw6Krbfwvtzg3aakSpDmUvmcBSEF/P/XW1txPPoAe1viiRJLNdRS+P9BweEB
lvWgYxp9jq05KUj0gdw5L2dMsDgVYQskabnvzYS57Z8cgXWLgNtASQ==
=YARV
-----END PGP SIGNATURE-----
This archive was generated by hypermail 2.1.4 : Mon Jan 09 2006 - 07:07:51 GMT-3