Re: [Ila] [5gangip] PS draft: New Version Notification for draft-hspab-5gangip-atticps-00.txt

[Tom Herbert <[e-mail]>]

On Wed, Jan 31, 2018 at 3:25 PM, Dino Farinacci <[e-mail]> wrote:
>> That should only be true if you are my network provider. To anyone
>> else the only thing they should be able to deduce from an address is
>> that the packet originated from a random user of my network provider.
>
> I can tcpdump packets on my router for packets you send before the locator is translated back to the sir-prefix. And count on the locator being in DNS for a reverse lookup so I can get some ascii text that gives me a clue.

Again, that is only true if your router is in the provider network  If
locators imply geo-location, which they likely would in a mobile
network, then exposing them to anyone outside of the trusted network
is asking for trouble.
>
>>
>>> You have to change and obfuscate EIDs and you have to keep using different RLOCs. Cat and mouse game.
>>>
>> For best privacy you would keep using different source addresses
>> (identifiers) for different flows, Locators are not an issue if their
>> visibility is restricted to the provider network, so that neither UEs
>> nor external nodes ever see them .
>
> Don’t you want your provider to not track you?

It's inherent in the operations  that my provider tracks me in order
to be able to forward packets. But, I have a contractual agreement
with the provider to do that and protect privacy. For anyone outside
of my provider, I don't want them to be able to track me. This is why
I don't want locators to be visible outside of the network. That would
include UEs attached to the network (they are not trusted devices) and
putting locators in DNS.

Tom



>
> Dino
>