Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Silly question, but doesn't ipv6 make mitigating DoS attacks all that more harder? i.e. you can't easily blacklist IP addresses...


Well, you can ban whole /64 subnets :D


That's a bit heavy handed, no? :)


Not really, considering any single subscriber could be assigned a whole /56, and that machines with privacy addressing would be periodically changing the last 64 bits of their address.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: