From: IETF Executive Director <exec-director@ietf.org>
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3864.400.21\))
Subject: Further update on authenticating to use the IETF Network at IETF 125
 Shenzhen
Message-Id: <27B851E4-43C3-40DE-9580-8426D46C7D57@ietf.org>
Date: Wed, 11 Mar 2026 09:49:14 +1300
To: 125all@ietf.org,
 IETF Announcement List <ietf-announce@ietf.org>
Message-ID-Hash: 2AGGINZ2OBCVIHBTLXK53426TCUPUWGB
Precedence: list
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/ietf-announce/SSokEHwWXvVbwxriPj-r4gDC_Ro>

I am sorry to inform you that the regulatory requirements around =
authenticating to use the IETF Network at IETF 125 Shenzhen have again =
changed and again become more restrictive. The IETF Network itself =
remains an open, unfiltered network that allows VPNs and other security =
technologies to be used, with these changes only affecting =
authentication to the network.

The changes are:

1. Previously we have stated that the only information to be shared is =
the mapping between RADIUS account names and registrant names. Now, we =
are required to share RADIUS accounting logs including account name, IP =
address, last 24 bits of the MAC address, RADIUS accounting message =
types (start session, stop session, interim-update) and timestamp. This =
data will be provided after the meeting.

2. Previously we have stated that a registrant can have as many sets of =
RADIUS credentials as they wish. Now, there is a limit of two sets of =
credentials per registrant. Replacements are allowed if one set is lost, =
but only if the lost set is deactivated. We are also required to =
investigate whenever a single set of credentials is used on more than =
five MAC addresses to check that the credentials have not been lost, =
shared or compromised.

Please note that Chinese participants are expected to follow local laws =
that require real identity registration before using the network, but =
this does not apply to non-Chinese participants.

The IETF Administration LLC apologises for these unanticipated late =
changes and reiterates that any onsite registration can be converted to =
a remote registration with no handling fee.

We welcome the work recently proposed to clarify community expectations =
around anonymity and privacy on the IETF Network.

--=20
Jay Daley
IETF Executive Director
exec-director@ietf.org