11 events
when toggle format what by license comment
May 19 '17 at 6:32 history edited countermode CC BY-SA 3.0
Mar 30 '16 at 6:38 comment added countermode I don't know if ARP was replaced for security reasons in the first place. As far as I see it there was the desire to cover all control protocols by ICMPv6. As a side effect, yes, you can secure ICMPv6 by IPsec. However, IPsec requires a key exchange, and IKE runs over UDP - which requires an IP address. One task of NDP is to negotiate an IP address, and manual key exchange does not scale, so the idea of NDP + IPsec = secure NDP does not work this way. Alternatives like SeND haven't lifted off (and likely never will). In the end I don't see any security advantage of NDP over ARP.
Mar 29 '16 at 3:47 comment added Nick Bastin ARP was replaced with NDP in v6 for security reasons (and then, like all good v6-adjacent protocols, experienced significant feature creep), not because v6 doesn't have broadcast - ARP only uses L2 broadcast and easily could have been extended to provide v6 addresses.
Mar 29 '16 at 2:12 history edited Ron Maupin CC BY-SA 3.0
added 18 characters in body
Mar 29 '16 at 2:09 comment added Ron Maupin "ARP itself cannot be used, because it was made for 4-byte network layer addresses (i.e. IPv4)." This is not true. ARP uses address length fields to specify the address length (up to 255 octets) for both the layer-2 and layer-3 addresses (see RFC 826). The reason ARP can't be used with IPv6 is because IPv6 doesn't have broadcast.
S Mar 29 '16 at 2:02 history suggested Jacktose CC BY-SA 3.0
Corrected solicited-node multicast address prefix.
Mar 26 '16 at 19:20 review Suggested edits
S Mar 29 '16 at 2:02
Aug 4 '14 at 22:22 history edited countermode CC BY-SA 3.0
minor corrections
Aug 4 '14 at 20:53 history edited countermode CC BY-SA 3.0
corrected spelling
Jul 31 '14 at 19:11 review First posts
Jul 31 '14 at 20:16
Jul 31 '14 at 19:11 history answered countermode CC BY-SA 3.0