Given that Stack Exchange sites ban on IP, I wonder if there's a common opinion or strategy about making rules based on a user's IP in order to dictate behaviors.
With IPv4, you've got a few things you can fairly reliably assume about a given IP:
- IPs that share a subnet could very well be the same user
- while IPs can be reused for various actual endpoints, it's relatively unlikely that you'll see duplicate connections from an IP that are not the same user, or at the very least the same household/organization (basically, a shared connection)
- it's not trivially easy for a user to obtain a new public IP (there is a medium-sized barrier to entry here)
With IPv6, can you assume all of this? I would imagine at the very least the second point would not be true anymore since NAT'ing is supposed to essentially go away with IPv6 because there will be enough IPs for anyone who wants one.
If you have an IP-based set of policies in place, what considerations need to be made for IPv6 if any because of the differences in the two?