Re: [homenet] [Int-area] [Captive-portals] [EXTERNAL] Re: Evaluate impact of MAC address randomization to IP applications
Michael Richardson <mcr@sandelman.ca> Tue, 29 September 2020 17:30 UTC
Return-Path: <mcr@sandelman.ca>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAE253A0F37; Tue, 29 Sep 2020 10:30:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.898
X-Spam-Level:
X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DMlYCQF16SmQ; Tue, 29 Sep 2020 10:29:59 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 768953A0F36; Tue, 29 Sep 2020 10:29:59 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 0D9AC389D4; Tue, 29 Sep 2020 13:34:50 -0400 (EDT)
Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id r26zzGsPn7ym; Tue, 29 Sep 2020 13:34:49 -0400 (EDT)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 8AF54389C7; Tue, 29 Sep 2020 13:34:49 -0400 (EDT)
Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 0CE5DAAD; Tue, 29 Sep 2020 13:29:56 -0400 (EDT)
From: Michael Richardson <mcr@sandelman.ca>
To: Christian Huitema <huitema@huitema.net>, Martin Thomson <mt@lowentropy.net>, "Lee, Yiu" <Yiu_Lee@comcast.com>, "captive-portals@ietf.org" <captive-portals@ietf.org>, "homenet@ietf.org" <homenet@ietf.org>, "int-area@ietf.org" <int-area@ietf.org>
In-Reply-To: <af0451b1-8eae-4714-849f-d6e384dda075@huitema.net>
References: <20200922201317.097C3389D4@tuna.sandelman.ca> <15660.1600807202@localhost> <902400f2-9172-9581-25ab-59ad08e67bee@cs.tcd.ie> <D81695FF-973F-472D-BC0A-9B0F57278B21@comcast.com> <ca575a6b-987e-d998-2713-91e45190f5ea@cs.tcd.ie> <0A436777-D9CE-4A4C-BE45-C8C2CAB9FBF6@comcast.com> <29901277-6da1-46fc-b244-ca289005841d@www.fastmail.com> <af0451b1-8eae-4714-849f-d6e384dda075@huitema.net>
X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <19116.1601400595.1@localhost>
Date: Tue, 29 Sep 2020 13:29:56 -0400
Message-ID: <19117.1601400596@localhost>
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/oA0vaicBhJDtoZ45Xm8qMXguVgk>
Subject: Re: [homenet] [Int-area] [Captive-portals] [EXTERNAL] Re: Evaluate impact of MAC address randomization to IP applications
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Sep 2020 17:30:02 -0000
Christian Huitema <huitema@huitema.net> wrote: > Martin is making an important point here. There are a number of privacy > enhancing technologies deployed at different layers: MAC address > randomization at L2, Privacy addresses at L3, various forms of > encryption and compartments at L4 and above. Each of these technologies > is useful by itself, but they can easily be defeated by deployment > mistakes. For example: You are spot on. But, even your four points muddle things. We need some diagrams that we can all agree upon, and we need to name the different observers. Each thing defends against different kinds of observers, and not all observers can see all things. Some observers may collaborate (I invoke, the WWII French resistance emotion for this term...) Some observers may have strong reasons not to. > 1) Using the same IP address with different MAC addresses negates a lot > of the benefits of randomized MAC addresses, This assumes that a single observer can observe both at the same time. WEP++ leaves MAC addresses visible, but encrypts the rest of L3 content. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | IoT architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Stephen Farrell
- Re: [homenet] [Captive-portals] [Int-area] Evalua… Peter Yee
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Lee, Yiu
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Stephen Farrell
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Lee, Yiu
- Re: [homenet] [Int-area] Evaluate impact of MAC a… David R. Oran
- Re: [homenet] [EXTERNAL] Re: [Int-area] Evaluate … Lee, Yiu
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Bob Hinden
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Brian Dickson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Stephen Farrell
- Re: [homenet] [Captive-portals] [EXTERNAL] Re: [I… Martin Thomson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Captive-portals] [EXTERNAL] Re: [I… Michael Richardson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Ralf Weber
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Pascal Thubert (pthubert)
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Captive-portals] [Int-area] Evalua… Michael Richardson
- Re: [homenet] [Int-area] [Captive-portals] Evalua… Derek Fawcus
- Re: [homenet] [Int-area] [Captive-portals] Evalua… Malay Vadher
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Christian Huitema
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Michael Richardson
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Brian Dickson
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Michael Richardson
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Stephen Farrell
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Christian Huitema
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Peter Yee
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Michael Richardson
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Juan Carlos Zuniga
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Stephen Farrell
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Weil, Jason
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Rolf Winter
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Philip Homburg
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Michael Richardson
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Stephen Farrell
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Carsten Bormann
- Re: [homenet] [Int-area] [Captive-portals] Re: Ev… Livingood, Jason