Intelligence Directory

Fernando Gont

Security researcher and Internet standards contributor whose documented work includes IPv6 fragmentation, extension-header filtering and transient identifier security.

Public role: Security researcher and Internet standards contributor whose documented work includes IPv6 fragmentation, extension-header filtering and transient identifier security.

What to know first

Public roleSecurity researcher and Internet standards contributor whose documented work includes IPv6 fragmentation, extension-header filtering and transient identifier security.Medium confidence
Source basisPublic directory evidenceMedium confidence
Last verifiedAug 29, 2026High confidence

Basic information

NameFernando GontHigh confidence
Public roleSecurity researcher and Internet standards contributor whose documented work includes IPv6 fragmentation, extension-header filtering and transient identifier security.Medium confidence
Last verifiedAug 29, 2026High confidence

Related entities, projects, and resources

Editorial contextFernando Gont and the First Fragment That Had to Name What Came Next, An IPv6 fragment can arrive first without explaining what the completed packet is for. The source address is visible, the destination is visible and the fragment offset says zero, yet the transport header a firewall needs may be hiding in a later piece. RFC 7112, co-authored by Fernando Gont, closed that gap with a deliberately narrow rule: the first fragment must carry the header chain through the upper-layer header. It is enough information to make one packet-local admission decision—not enough to turn admission into identity, reassembly or truth.Medium confidence