WireGuard Gives Linux a Faster, More Secure VPN

Re:WireGuard Gives Linux a Faster, More Secure VPN by tinus_hn on Thursday March 05, 2020 @06:38AM (#22492712)

So instead of not using the MAC address in the IPv6 (which any reasonably modern OS does because this problem is old, well known and trivially solved) you get rid of MAC addresses altogether? Just so you can have some illusion of privacy while sending your traffic through a supposedly compromised network?

This is paranoia about all the wrong things, focusing on irrelevant details and ignoring what’s important.

[ Parent | on HN ]

Re:WireGuard Gives Linux a Faster, More Secure VPN by ffk on Saturday March 07, 2020 @10:06PM (#22516068)

I don't believe I suggested getting rid of the MAC address altogether. Ethernet isn't going away anytime soon.

The suggestion is simply this: Don't embed your MAC address into your IPv6 address because it's a unique identifier that can deanonymize you even if you shift networks.

[ Parent | on HN ]