Human-safe IPv6: Cryptographic transformation of hostnames as a base for secure and manageable addressing
draft-yourtchenko-opsec-humansafe-ipv6-00

This Internet-Draft is no longer active. Unofficial copies of old Internet-Drafts can be found here:
http://tools.ietf.org/id/draft-yourtchenko-opsec-humansafe-ipv6.

Abstract:
Although the IPv6 address space within a single /64 subnet is very large, the typical distribution of the addresses in this space is very non-uniform. This non-uniformity, together with the dictionary- based DNS brute-force enumeration, allows practical remote mapping of the IPv6 addresses in these subnets. This document proposes a technique which can be used to decrease the exposure of the server subnets to trivial scanning. As a side effect, the proposed technique allows to drastically simplify the address management.

Authors:
Andrew Yourtchenko <ayourtch@cisco.com>
Salman Asadullah <sasad@cisco.com>
Mircea Pisica <mircea.pisica@bt.com>

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)