Re: [dnssd] I-D Action: draft-huitema-dnssd-privacy-00.txt

["Christian Huitema" <[e-mail]>]

On Thursday, March 17, 2016 4:12 PM, Tim Chown wrote:
>
> Hi,
>
> Ralph and I would welcome comments to the list on this draft.
>
> Tim

Yep. Me too. This draft
(https://datatracker.ietf.org/doc/draft-huitema-dnssd-privacy/) is the
continuation of the work to minimize metadata disclosure went moving to
random locations, and in particular when connecting to Wi-Fi hot spots.

The first big disclosure comes with the MAC address, and can be addressed
with MAC address randomization. The next big disclosure are the DHCP
messages, which use to disclose things like DNS name of the node, and the
DNS traffic, which would happily pass a full log of visited URL to the DNS
server chosen by the hot spot manager. The IETF has been working on that
with the DHCP anonymity profile, and with the DNS Privacy work in DPRIVE.
Which means we have to look at the next big disclosure source, which happens
to be DNS-SD.

The draft proposes essentially to obfuscate the names used in DNS-SD so that
cooperating parties understand them, but they look like gibberish to casual
observers. I am sure that DNS-SD WG members have opinions about that.

-- Christian Huitema