• 0 posts
  • 10 comments
Joined 3 years ago
Cake day: June 27th, 2023
  • My comment, which you refer to, said nothing about NAT -or- firewalls. Rather, it’s a direct response to the second sentence in the article’s opening paragraph: “To the average computer user, the idea that someone could just… connect to your computer feels exotic, or even dangerous…”

    You may be correct that nobody would recommend implementing IPv6 without a firewall. But this article avoids the subject of firewalls completely, which in combination with that opening paragraph leaves the distinct impression that we shouldn’t be concerned about it because that’s the way the internet was meant to be.

    Of course this has nothing to do with NAT or IPv6, and the value of IPv6 can’t be overstated. But to ignore the security part of the equation is going to have one of two effects: 1) people who don’t know better will think they can use IPv6 without a firewall, or 2) people who understand the risks will be skeptical of the claims that IPv6 is better because you are leaving out an important part of the equation.

  • In the same way that the XKCD hand-waved FTP, this article hand-waves the idea that we shouldn’t be concerned about who can access our self-hosted services.

    I’m not saying it’s wrong, but I’d like more of an explanation on why we shouldn’t be concerned about allowing anybody on the internet having direct communication with our computers.