On Sat, Sep 14, 2024, at 09:30, Daniel Gröber wrote: > 3) dhcpcd-base enables IPv6 privacy addressess by default.
Please never do this *by silent default* when DHCPv6 is being used for stateful address assignment, privacy addresses are a big issue on non-home networks and even on home networks depending on firewall rules... Although I suppose a relevant note on NEWS.Debian *and* the Release Notes might be enough if.we consider it is desirable for most installs. > 3) Since ifupdown is mainly used in the server/embedded sorts of > enviornments I'm not sure privacy addressing is the right default. > (cf. /etc/dhcpcd.conf having `slaac private` thus enabling RFC 7217 > addressing). We can assume NM will be in use for most Desktop users so I > believe it's safe in principle to retain the current MAC based SLAAC > address behaviour we used to get from the kernel RA implementation. > Thoughts? Agreed, the less surprises here, the better. -- Henrique de Moraes Holschuh <h...@debian.org>
