IP 黑名单将在未来几年内过时
目前使用的IP黑名单有多种:
- in firewalls
- to stop SPAM: DNSBL (域名系统黑名单) 例如 SpamHaus, 梭鱼, ETC
- reputation systems (喜欢 “Webroot® BrightCloud® 威胁情报”)
They are currently all using IPv4. However as IPv6 is slowly taking over: 数十亿 & 现在有数十亿个IP地址可供使用. The concept of blacklisting an IP address will become obsolete: it makes absolutely no sense to slow down network speeds with a filter that has to go through billions of row. The trend is pointing towards faster networks, not slower ones.
What does it mean?
It means that users will have to stop using those services. And the companies selling those services will have to quickly switch to something else. And it is a good riddance!
What about geographic localisation by IP address?
This will go probably fade away. And Netflix is in trouble: as they use geo-ip localisation for restrictions.
How do you keep away the bad guys away then?
As far as SPAM is concerned: 动态KIM (Domain Keys Identified Mail) will become a mandatory standard. DKIM signatures can already be checked during the SMTP connections, thus SPAM will get rejected even before it gets delivered.
For firewalls: 分布式拒绝服务 (Distributed Denial of Service) attacks will be harder to stop, and port flooding control will become the norm.
Would it be a for a better future?
Absolutely! It will be more secure for everyone. Users will have to register and authenticate themselves to get a secure and fast service.