Hacker News Reader

RA message can specify a DNS server.

Mine specifies the router's ULA, which is effectively static, and it runs unbounded.

How do you authenticate RA messages? I mean, can anyone just throw RA messages onto the network?

This seems like the "rogue DHCP" problem in v4.

Similar to v4 DHCP guard, configure RA guard on your switches.