Re: [homenet] [Int-area] Evaluate impact of MAC address randomization to IP applications
Stephen Farrell <stephen.farrell@cs.tcd.ie> Wed, 23 September 2020 00:37 UTC
Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: homenet@ietfa.amsl.com
Delivered-To: homenet@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3137F3A0787; Tue, 22 Sep 2020 17:37:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kR1nSvlvLjHl; Tue, 22 Sep 2020 17:37:40 -0700 (PDT)
Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A433A3A0128; Tue, 22 Sep 2020 17:37:39 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 8BA12BE2F; Wed, 23 Sep 2020 01:37:37 +0100 (IST)
X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie
Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wxjHkK6wC7P4; Wed, 23 Sep 2020 01:37:35 +0100 (IST)
Received: from [10.244.2.119] (95-45-153-252-dynamic.agg2.phb.bdt-fng.eircom.net [95.45.153.252]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 24874BE2E; Wed, 23 Sep 2020 01:37:35 +0100 (IST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1600821455; bh=F3t/4lNg29gI9i7d/ES0wRnx4cSsOc5QF01mSlZkLNI=; h=To:Cc:References:From:Subject:Date:In-Reply-To:From; b=yikv9E1smfAN1PqnBu4viDaTeoUafD8jcMtBJ4btVzSFLdpz5TnQYG9HF2EF55+w5 JAoX0dU6HkXbmp01A064j1ec1NkaqL12o1Y8Ayo+wYBvxrqeR2/UeF3Fd6+03t3Tyo e9COPSF0uNl1ZvdqgC0OGjRpROY9/UrWD36ii0RI=
To: Brian Dickson <brian.peter.dickson@gmail.com>, Michael Richardson <mcr+ietf@sandelman.ca>
Cc: captive-portals@ietf.org, HOMENET <homenet@ietf.org>, Internet Area <int-area@ietf.org>, Bob Hinden <bob.hinden@gmail.com>
References: <20200922201317.097C3389D4@tuna.sandelman.ca> <15660.1600807202@localhost> <902400f2-9172-9581-25ab-59ad08e67bee@cs.tcd.ie> <09A7F884-F102-4081-BB1D-F7760B2DCE9B@gmail.com> <20953.1600817118@localhost> <CAH1iCipaRD=DQe7G_+EuXg=svVu6hzCicyKgzYrQszW243FaPQ@mail.gmail.com>
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Autocrypt: addr=stephen.farrell@cs.tcd.ie; prefer-encrypt=mutual; keydata= mQINBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nemCP5PMvmh 5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kTq0IqYzsEv5HI58S+ QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtEgvw4fVhVWJuyy3w//0F2tzKr EMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy+pAh4EKzS1FE7BOZp9daMu9MUQmDqtZU bUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqO Vz+7L+WiVfxLbeVqBwV+4uL9to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJg b097ZaNyuY1ETghVB5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k 4LyM2lp5FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9tlyWxn5Xi HzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQABtDJTdGVwaGVuIEZh cnJlbGwgKDIwMTcpIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPokCQAQTAQgAKgIbAwUJ CZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAUCWj6jdwIZAQAKCRBasvrxexcr6o7QD/9m x9DPJetmW794RXmNTrbTJ44zc/tJbcLdRBh0KBn9OW/EaAqjDmgNJeCMyJTKr1ywaps8HGUN hLEVkc14NUpgi4/Zkrbi3DmTp25OHj6wXBS5qVMyVynTMEIjOfeFFyxG+48od+Xn7qg6LT7G rHeNf+z/r0v9+8eZ1Ip63kshQDGhhpmRMKu4Ws9ZvTW2ACXkkTFaSGYJj3yIP4R6IgwBYGMz DXFX6nS4LA1s3pcPNxOgrvCyb60AiJZTLcOk/rRrpZtXB1XQc23ZZmrlTkl2HaThL6w3YKdi Ti1NbuMeOxZqtXcUshII45sANm4HuWNTiRh93Bn5bN6ddjgsaXEZBKUBuUaPBl7gQiQJcAlS 3MmGgVS4ZoX8+VaPGpXdQVFyBMRFlOKOC5XJESt7wY0RE2C8PFm+5eywSO/P1fkl9whkMgml 3OEuIQiP2ehRt/HVLMHkoM9CPQ7t6UwdrXrvX+vBZykav8x9U9M6KTgfsXytxUl6Vx5lPMLi 2/Jrsz6Mzh/IVZa3xjhq1OLFSI/tT2ji4FkJDQbO+yYUDhcuqfakDmtWLMxecZsY6O58A/95 8Qni6Xeq+Nh7zJ7wNcQOMoDGj+24di2TX1cKLzdDMWFaWzlNP5dB5VMwS9Wqj1Z6TzKjGjru q8soqohwb2CK9B3wzFg0Bs1iBI+2RuFnxLkCDQRaPVAyARAA+g3R0HzGr/Dl34Y07XqGqzq5 SU0nXIu9u8Ynsxj7gR5qb3HgUWYEWrHW2jHOByXnvkffucf5yzwrsvw8Q8iI8CFHiTYHPpey 4yPVn6R0w/FOMcY70eTIu/k6EEFDlDbs09DtKcrsT9bmN0XoRxITlXwWTufYqUnmS+YkAuk+ TLCtUin7OdaS2uU6Ata3PLQSeM2ZsUQMmYmHPwB9rmf+q2I005AJ9Q1SPQ2KNg/8xOGxo13S VuaSqYRQdpV93RuCOzg4vuXtR+gP0KQrus/P2ZCEPvU9cXF/2MIhXgOz207lv3iE2zGyNXld /n8spvWk+0bH5Zqd9Wcba/rGcBhmX9NKKDARZqjkv/zVEP1X97w1HsNYeUFNcg2lk9zQKb4v l1jx/Uz8ukzH2QNhU4R39dbF/4AwWuSVkGW6bTxHJqGs6YimbfdQqxTzmqFwz3JP0OtXX5q/ 6D4pHwcmJwEiDNzsBLl6skPSQ0Xyq3pua/qAP8MVm+YxCxJQITqZ8qjDLzoe7s9X6FLLC/DA L9kxl5saVSfDbuI3usH/emdtn0NA9/M7nfgih92zD92sl1yQXHT6BDa8xW1j+RU4P+E0wyd7 zgB2UeYgrp2IIcfG+xX2uFG5MJQ/nYfBoiALb0+dQHNHDtFnNGY3Oe8z1M9c5aDG3/s29QbJ +w7hEKKo9YMAEQEAAYkCJQQYAQgADwUCWj1QMgIbDAUJCZQmAAAKCRBasvrxexcr6qwvD/9b Rek3kfN8Q+jGrKl8qwY8HC5s4mhdDJZI/JP2FImf5J2+d5/e8UJ4fcsT79E0/FqX3Z9wZr6h sofPqLh1/YzDsYkZDHTYSGrlWGP/I5kXwUmFnBZHzM3WGrL3S7ZmCYMdudhykxXXjq7M6Do1 oxM8JofrXGtwBTLv5wfvvygJouVCVe87Ge7mCeY5vey1eUi4zSSF1zPpR6gg64w2g4TXM5qt SwkZVOv1g475LsGlYWRuJV8TA67yp1zJI7HkNqCo8KyHX0DPOh9c+Sd9ZX4aqKfqH9HIpnCL AYEgj7vofeix7gM3kQQmwynqq32bQGQBrKJEYp2vfeO30VsVx4dzuuiC5lyjUccVmw5D72J0 FlGrfEm0kw6D1qwyBg0SAMqamKN6XDdjhNAtXIaoA2UMZK/vZGGUKbqTgDdk0fnzOyb2zvXK CiPFKqIPAqKaDHg0JHdGI3KpQdRNLLzgx083EqEc6IAwWA6jSz+6lZDV6XDgF0lYqAYIkg3+ 6OUXUv6plMlwSHquiOc/MQXHfgUP5//Ra5JuiuyCj954FD+MBKIj8eWROfnzyEnBplVHGSDI ZLzL3pvV14dcsoajdeIH45i8DxnVm64BvEFHtLNlnliMrLOrk4shfmWyUqNlzilXN2BTFVFH 4MrnagFdcFnWYp1JPh96ZKjiqBwMv/H0kw==
Message-ID: <af1d71f0-fc01-3215-be3b-4730acf59d87@cs.tcd.ie>
Date: Wed, 23 Sep 2020 01:37:34 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0
MIME-Version: 1.0
In-Reply-To: <CAH1iCipaRD=DQe7G_+EuXg=svVu6hzCicyKgzYrQszW243FaPQ@mail.gmail.com>
Content-Type: multipart/mixed; boundary="------------04AE8B4DFB1DAD62168D625E"
Content-Language: en-US
Archived-At: <https://mailarchive.ietf.org/arch/msg/homenet/zqCZ_Le4F6GhhjtXF1RPQrbC3Ok>
Subject: Re: [homenet] [Int-area] Evaluate impact of MAC address randomization to IP applications
X-BeenThere: homenet@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF Homenet WG mailing list <homenet.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/homenet>, <mailto:homenet-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/homenet/>
List-Post: <mailto:homenet@ietf.org>
List-Help: <mailto:homenet-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/homenet>, <mailto:homenet-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Sep 2020 00:37:42 -0000
Hiya, On 23/09/2020 01:13, Brian Dickson wrote: > IMNSHO, MACs should be relegated to the role reflected in their name: Media > Access Control, basically a disambiguator, not an identity. With s/disambiguator/local disambiguator/ I would entirely agree I think. > The work being done by the exposure notification may be a good reference > model. > (Google Apple Exposure Notification, aka GAEN, for the SARS-CoV-2 aka > Covid-19 protocols for privacy-first automatic exposure notification over > BLE). > That too uses identifiers that are non-linkable and rotate periodically (on > the order of 10 minutes IIRC). I don't think the GAEN system is a good example. Mainly because, despite what I think are the good intentions of all involved (that I've talked to anyway), I doubt it could ever work reliably (and so is to some extent theatre) but also because it's inherently vulnerable to replay attacks, implementations can be very privacy unfriendly, and the governance part is pretty sucky. It also turns out that integrating GAEN into a real contact tracing system seems quite failure prone too. (Apologies for the self-references but our reports at [1] cover all the above and more.) That said, some of the protocol constructs used by GAEN may well be good things to re-use though - there are some good ideas there, in addition to the unjustified optimism. (*) Cheers, S. [1] https://down.dsg.cs.tcd.ie/tact/ (*) "unjustified optimism" isn't quite right - I figure it was more a case of "something must be done; <this> is something that is less bad than <that>, therefore <this> will be done." > > Brian > > > _______________________________________________ > homenet mailing list > homenet@ietf.org > https://www.ietf.org/mailman/listinfo/homenet >
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Stephen Farrell
- Re: [homenet] [Captive-portals] [Int-area] Evalua… Peter Yee
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Lee, Yiu
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Stephen Farrell
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Lee, Yiu
- Re: [homenet] [Int-area] Evaluate impact of MAC a… David R. Oran
- Re: [homenet] [EXTERNAL] Re: [Int-area] Evaluate … Lee, Yiu
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Bob Hinden
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Brian Dickson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Stephen Farrell
- Re: [homenet] [Captive-portals] [EXTERNAL] Re: [I… Martin Thomson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Captive-portals] [EXTERNAL] Re: [I… Michael Richardson
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Ralf Weber
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Pascal Thubert (pthubert)
- Re: [homenet] [Int-area] Evaluate impact of MAC a… Michael Richardson
- Re: [homenet] [Captive-portals] [Int-area] Evalua… Michael Richardson
- Re: [homenet] [Int-area] [Captive-portals] Evalua… Derek Fawcus
- Re: [homenet] [Int-area] [Captive-portals] Evalua… Malay Vadher
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Christian Huitema
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Michael Richardson
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Brian Dickson
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Michael Richardson
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Stephen Farrell
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Christian Huitema
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Peter Yee
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Michael Richardson
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Juan Carlos Zuniga
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Stephen Farrell
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Weil, Jason
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Rolf Winter
- Re: [homenet] [Int-area] [Captive-portals] [EXTER… Philip Homburg
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Michael Richardson
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Stephen Farrell
- Re: [homenet] [Captive-portals] [Int-area] [EXTER… Carsten Bormann
- Re: [homenet] [Int-area] [Captive-portals] Re: Ev… Livingood, Jason