[Captive-portals] User equipment identification

Michael Schneider <michael.schneider@onway.ch> Fri, 03 July 2020 20:27 UTC

Return-Path: <michael.schneider@onway.ch>
X-Original-To: captive-portals@ietfa.amsl.com
Delivered-To: captive-portals@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BF783A0E2F for <captive-portals@ietfa.amsl.com>; Fri, 3 Jul 2020 13:27:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cloudguard.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uxwfMFScrGjn for <captive-portals@ietfa.amsl.com>; Fri, 3 Jul 2020 13:27:29 -0700 (PDT)
Received: from CHE01-GV0-obe.outbound.protection.outlook.com (mail-gv0che01on2048.outbound.protection.outlook.com [40.107.23.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 359133A0E2D for <captive-portals@ietf.org>; Fri, 3 Jul 2020 13:27:28 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Mnxu+uhhy9eBjNn8vrDW0duwDZJiOnV7yP8gFOPhEWKi5Lb+kQUV7iyr/LLDfjUkVmk3XZh9Z9SEEkBKX2QGylvsa08UUZNQzV/eTifpFWnytKw0oopJ7aAH7WORtnF2Oyv4E2rnv1fynCIj6SUnRTx9FnHCThcrkCnbvB9HkBg13EhxQd6UJhVvFQUTkNvUuWENXZU9pi2bWKRNrITPJ4Pkxd7GrZJ9aMWHMBntpcsf9EOPEK8jt7PIW2yii4HL/csHziqHqPFAArr2tQh0sxFWl8O1320fuoZ4vDQAgmyggcwoqjT9R8x+V4u6f/GLxgRXCJ/A+VgisuJ0ZiHfnQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EI4kMPIf1p78X407DkBbkQng/MLa5Fx3kh02P2Qfxf8=; b=NPLtHdkNRFkpsAxMN7UVkyEOBkKIr2V6ZywYnhAk0vlufX6mw3yE5imDjgCqI4wvSk5WMB1mJoZsNTDYMAl6/VLqgsUHyoqpfSoMt3PveL1POPnIS2aM9hn7qWrmTfy1CkZa+tfIu1pnZNMddKmsdATYUkvP6y7polPNqJ9RFoqhjUKgfz1//ekVka52qCa3BxNvs684OGqHN1QOIQRbMYx56/IVR9SqAAze3cS15Glt7xeuHqzDBkW+1N5vUGxGWZRT8ckoFl7QxNklE+BFx5HcRkY+GlfwJrjPp+jF5BvYJBl3PF6qlwotaM4PyENdy47KArjtR5a6GOGNF7tpQA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=onway.ch; dmarc=pass action=none header.from=onway.ch; dkim=pass header.d=onway.ch; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudguard.onmicrosoft.com; s=selector2-cloudguard-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EI4kMPIf1p78X407DkBbkQng/MLa5Fx3kh02P2Qfxf8=; b=mXpfRPbi9acqQBo5pN4S4SDb5z7DkeyJcxDUWb9fTapMTXSgpMIk2LrEXxf82VzFtMlM8Sb3/mpFTGIRuCEfTOSOzCAVpj/K6vzfo7NGWFt8i3muqYPVDymFNkCgnGEWePMnug6ORthnSR8WYQFnd1VCHNI+zOd4J/AJAlwRfUQ=
Received: from ZRAP278MB0063.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:12::10) by ZR0P278MB0089.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:18::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3153.24; Fri, 3 Jul 2020 20:27:26 +0000
Received: from ZRAP278MB0063.CHEP278.PROD.OUTLOOK.COM ([fe80::30d2:28f2:5ac4:4ff2]) by ZRAP278MB0063.CHEP278.PROD.OUTLOOK.COM ([fe80::30d2:28f2:5ac4:4ff2%9]) with mapi id 15.20.3153.024; Fri, 3 Jul 2020 20:27:25 +0000
From: Michael Schneider <michael.schneider@onway.ch>
To: "captive-portals@ietf.org" <captive-portals@ietf.org>
Thread-Topic: User equipment identification
Thread-Index: AQHWUXhdIabzyM+sH0qkpDV+Ie45ug==
Date: Fri, 03 Jul 2020 20:27:25 +0000
Message-ID: <3018282E-F85A-49B0-91DF-0BB629165F80@onway.ch>
Accept-Language: en-US, en-CH, de-CH
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=onway.ch;
x-originating-ip: [2a02:1205:c698:17d0:dc43:86c2:8474:5c7]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: fe0f3626-f8eb-4e4a-4317-08d81f8f7fea
x-ms-traffictypediagnostic: ZR0P278MB0089:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <ZR0P278MB0089D832066B29F4B89C6FF3916A0@ZR0P278MB0089.CHEP278.PROD.OUTLOOK.COM>
x-ms-oob-tlc-oobclassifiers: OLM:8273;
x-forefront-prvs: 045315E1EE
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: qLxYryuAtr09VV7imxLAVefE1pfMQIUAbYV5LVjL8P1bAVmA60n3OFV28F+XXeLbomckChW6bBV1Dnm348V98aF+GgwDd1GOVkqa2gs08cy1FOKu2A+PRwx+JNIdsHi5O/s/g15uRnsdIvamK84kU26E6jhF4EOUorZe2h6kYTip+hHg2TBNh8P6H/WkQh6+LEmXX4lCIKydxb2StPVU+mVT4YnMo1CxCqbMU6hhOTPz172lAMlBRFSqbjGVN4lblt8iHX8fQfjYIk+nI628UWQPcrBjGDT7cussbMSTtSEIdOpMrlrHnPbViczfzvVbvRWwsdBTZTz/pCRwlAd7vmFtfdVIDs06A2go/VFUP7d3YLWUgP8nwnjfYjVNNAhkFCsbPzMLAP0o4G4dp3V2qyiysrGzlBOf7W2LcBxrSx8HzTGL4xWMiuWH1UyeX7DEStL1yEI9jVyDOOGAlNVpfWEJfFlhGiqTIRpdIoKPgDc=
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:ZRAP278MB0063.CHEP278.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(396003)(376002)(366004)(39830400003)(346002)(136003)(6916009)(6512007)(6506007)(99936003)(186003)(83080400001)(6486002)(316002)(33656002)(7116003)(3480700007)(8936002)(86362001)(8676002)(71200400001)(508600001)(4744005)(64756008)(66446008)(66476007)(66616009)(66556008)(91956017)(66946007)(76116006)(44832011)(2616005)(2906002)(5660300002)(36756003)(15974865002)(554374003)(18886075002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata: KHaotlwlS4Z/7DXGWVtVfisZ3xmJgCcNQe+6sFQFzgfQMjWsHoTk/5Ri5bZLSpXhii+l8WaGNqEA4jKUUV/3XUaJiNLVv1KdePkG+pgqG/zX9BreZ6RJuUSXksLjPqxQ5hdvljRDuftKvFrFkA0qJ86T8Od4RnAA8xtbqImfEGXRyVUYa2fbyH/vfpfwLCl1dWe/0EX/VfCCe8XTFyPdURp1Pp9VI3R1QZORcnf04R/LPP6bP/5vVLgypUh34M6DwQTGyAYQH0O3fh727TgWRxHA1qVaMXvPo8ETjGYUJs1igWIZcik+hYd4Onh5LTxkGeFeXiyNG8+dKO3PcR/PVcc24jyIpbsCiXHbVxTysa/dxzd5yCNXKHE7eRxj5VqQ/jVImnUDkFpl0CV/nwOpd7RtSp8cRwe91U/O5WDFrEflsejgHslaIxRWBJTh40fZvpL91TIO1mch1T8Ub0JIm2ZrF385myqRk96CKRA7QcUWSmICYNvPFZlDLHnJuWYuSe3WdnYnBx8Wz6w5iBEcrlmOBHBETUjIJZhziEhSVWw+9nhJPPpS0HLRn65JaPcv
Content-Type: multipart/signed; boundary="Apple-Mail=_9229CED3-006E-4316-9C2A-1AA9A73EE8C5"; protocol="application/pkcs7-signature"; micalg="sha-256"
MIME-Version: 1.0
X-OriginatorOrg: onway.ch
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: ZRAP278MB0063.CHEP278.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: fe0f3626-f8eb-4e4a-4317-08d81f8f7fea
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2020 20:27:25.8822 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 6609f251-fcb7-49e1-90a9-db1acfa508db
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Zlj5AitHwQxQxohWu3cSTW3svPLwTHXSTPKMiseCCylfbCO0mM8ESzSFzuQn/zdbX6WJpTLVphgqLEGu+TiOZATNcBxaTdeiEXyKlyOD6F0=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: ZR0P278MB0089
Archived-At: <https://mailarchive.ietf.org/arch/msg/captive-portals/keiFgksCp-l5-22Ghvne0ianOP0>
Subject: [Captive-portals] User equipment identification
X-BeenThere: captive-portals@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Discussion of issues related to captive portals <captive-portals.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/captive-portals/>
List-Post: <mailto:captive-portals@ietf.org>
List-Help: <mailto:captive-portals-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/captive-portals>, <mailto:captive-portals-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 03 Jul 2020 20:27:32 -0000

Hi,

I have read the documents about CAPPORT and as a Captive Portal vendor I find the current drafts very reasonable and well thought out. But a question came up when I was thinking about a dual stack user equipment. How does the client behave if it has an IPv4 and an IPv6 address and one of the two addresses is captive=false and the other captive=true. Do you see ways for the enforcement device to match these two addresses and allow both if one of them gets captive=false? Furthermore, a user equipment can hold more than one IPv6 address at a time and/or change it frequently.

Many thanks for your advice.

Regards,
Michael

--
onway ag
Michael Schneider
Head of Development

Stauffacherstrasse 16, CH-8004 Zürich
Tel: +41 55 214 18 35
michael.schneider@onway.ch
www.onway.ch