Hacker News Reader

Silly question, but doesn't ipv6 make mitigating DoS attacks all that more harder? i.e. you can't easily blacklist IP addresses...

View on HN

Well, you can ban whole /64 subnets :D

That's a bit heavy handed, no? :)

Not really, considering any single subscriber could be assigned a whole /56, and that machines with privacy addressing would be periodically changing the last 64 bits of their address.

Reply on news.ycombinator.com