Re: 6to4 security questions

[Pekka Savola <pekkas@netcore.fi>]

On Thu, 21 Nov 2002, Francis Dupont wrote:
>    The amount of harm one can do is similar, but the model seems otherwise a
>    bit different.
>    
>    Mobile nodes _were able to_ (speaking about the old spec where unverified
>    HAO was still ok) communicate without HAO's.  Your regular honest 6to4
>    node can't as it's its only address; they have no care-of addresses for
>    bootstrapping, regular/no-frills operation, etc.
>    
> => I don't buy this argument: 6to4 is not the only transition technology.

Yes, it isn't -- but when 6to4 is used, there are no other, concurrently 
used transition technologies.

-- 
Pekka Savola                 "Tell me of difficulties surmounted,
Netcore Oy                   not those you stumble over and fall"
Systems. Networks. Security.  -- Robert Jordan: A Crown of Swords