>> When the compliance explicitly requires something they are required to >> check for it, they don't have the option of ignoring or waving >requirements ... >> and off the top of my head I don't recall if it is SOX that calls for >> RFC1918 explicitly but I know there are some that do. > >I believe that RFC1918 space won't be a requirement for IPv6. I'm pretty >sure the requirements will change as the addressing changes. Of course, I'm >sure you will have a lot of NEW requirements. :)
But that is the problem - it doesn't say "You must use RFC1918 for IPv4" ... it just says "You must use RFC1918". Meaning, you must not run IPv6. And some regulations do not mention/address IPv6 at all. Silence != security.
