SoylentNews is people
SoylentNews
from the if-only-I-could-do-it-over dept.
Vint Cerf is considered a father of the internet, but that doesn't mean there aren't things he would do differently if given a fresh chance to create it all over again.
"If I could have justified it, putting in a 128-bit address space would have been nice so we wouldn't have to go through this painful, 20-year process of going from IPv4 to IPv6," Cerf told an audience of journalists Thursday during a press conference at the Heidelberg Laureate Forum in Germany.
IPv4, the first publicly used version of the Internet Protocol, included an addressing system that used 32-bit numerical identifiers. It soon became apparent that it would lead to an exhaustion of addresses, however, spurring the creation of IPv6 as a replacement. Roughly a year ago, North America officially ran out of new addresses based on IPv4.
For security, public key cryptography is another thing Cerf would like to have added, had it been feasible.
Trouble is, neither idea is likely to have made it into the final result at the time. "I doubt I could have gotten away with either one," said Cerf, who won a Turing Award in 2004 and is now vice president and chief internet evangelist at Google. "So today we have to retrofit."
(Score: 1, Informative) by Anonymous Coward on Sunday September 25 2016, @08:14AM
If you want to see why it is a terrible thing go look at the NAT code inside of most routers. It is a sight to behold. Most actual router code is pretty simple.
NAT also creates another attack surface. Yep. Several recent attacks have been working around NAT to get into peoples networks. Instead of a clean firewall. Several smart guys long ago figured out the 'hole punch'. https://en.wikipedia.org/wiki/Hole_punching_(networking) [wikipedia.org]
NAT is a hack to work around a shortage. We actually ran out of IPs years ago.
Also ipv6 has private ranges and can do NAT. *IF* you really really really want to.
Of course, hackers (the evil kind) love the idea that every device out there will have a permanent
That is why you have a real firewall.
possibly along with transient IP addresses if it's a mobile device
You have not worked at a phone company or ISP have you? 99.999999% of them are static or for all intents static.
That makes their job so much easier.
It makes everyone's job easier. I dont make shit code just to make someone elses life slightly harder. If you think NAT will stop hackers you are dreaming.
Instead of worrying about ipv4 vs ipv6 I suggest you worry more about the problems in the core network routing and how easy it is to screw up.
(Score: 2) by Pino P on Sunday September 25 2016, @09:03PM
How would you go about adding "a real firewall" to, say, a USB LTE modem?
(Score: 0) by Anonymous Coward on Monday September 26 2016, @09:05AM
You stick it in the USB-port of the firewall.
Oh, you mean a single (laptop, probably) computer? Secure the computer, instead of putting a firewall in front of it.