consistentAddress, IPv6 and Happy Eyeballs

[Cantor, Scott]

On 5/4/12 11:59 AM, "Russ Allbery" <rra at stanford.edu> wrote:
>
>FWIW, we gave up on trying to bind web authentications to email addresses
>about ten years ago.  At the time, the problem was asymmetric proxies, but
>it's just another instance of the same thing.
>
>The Kerberos community has pretty much given up on address-locked tickets
>for similar reasons.

Yeah, that was what I was alluding to. We have not given it up here, and
we have very few SPs deployed with consistentAddress off. We have no IPv6
(yes, really), so it would seem that plays into it as well.

If this were a simple change, I obviously would do it, because I'd benefit
from it.

-- Scott