IPv6 security

Firewalls will remain, but the model needs a change;
we cannot just drop incoming SYNs.
IPv6 will introduce many bi-directional communications
per-host security will be more and more important.
Applicability of IPsec should change
today (for IPv4): mainly for VPN, thus tunnel mode
for IPv6: more and more end-to-end usage will come.
mainly transport mode.
key management can be much harder
an "ad-hoc", easy-to-use secure pipe will meet the requirement, rather than a solid security infrastructure.
c.f. ssh