Re: [Int-area] IPv4 address sharing abuse [was RE: draft-boucadair-intarea-nat-reveal-analysis]

Dear SM,

The HOST_ID can enclose the origin source IPv4 address, IPv6 address, IPv6 prefix, vlan, random value, etc. The only requirement on the HOST_ID is as mentioned in the I-D:

        "It must be unique to each host under the same
        IP address.  It does not need to be globally unique.  Of course,
        the combination of the (public) IPv4 source address and the
        identifier (i.e., HOST_ID) ends up being relatively unique.  As
        unique as today's 32-bit IPv4 addresses which, today, can change
        when a host re-connects."

As such the HOST_ID does not reveal other information than the source IP address if there is no NAT in the path. 

According to draft-morris-privacy-considerations-03, 

   "The following list contains examples of information that may be
   considered personal data:

   o  Name

   o  Address information

   o  Phone numbers, email addresses, SIP/XMPP URIs, other identifiers

   o  IP and MAC addresses or other host-specific persistent identifiers
      that consistently links to a particular person or small, well-
      defined group of people

   o  Information identifying personally owned property, such as vehicle
      registration number"

IP addresses and host-specific persistent identifiers are on the same level and may be considered as personal data. This is why we have the following in the draft:

  "If the HOST_ID is persistent it may be used to track a host (similar to
   persistent IP addresses)."

Cheers,
Med

-----Message d'origine-----
De : int-area-bounces@ietf.org [mailto:int-area-bounces@ietf.org] De la part de SM
Envoyé : jeudi 8 septembre 2011 20:48
À : Francis Dupont
Cc : int-area@ietf.org
Objet : Re: [Int-area] IPv4 address sharing abuse [was RE: draft-boucadair-intarea-nat-reveal-analysis]

Hi Francis,
At 10:29 08-09-2011, Francis Dupont wrote:
>Perhaps I repeat myself but as far as I know solutions to the
>draft-boucadair-intarea-nat-reveal-analysis problem are illegal
>at some places, in particular in European Union (and at a level
>which overrules national texts)...
>IMHO this issue should be clarified before adopting any document
>as a WG item.

Are you saying that what draft-boucadair-intarea-nat-reveal-analysis 
argues for cannot be implemented in the European Union?

As a general comment, Section 1.2 of the draft discusses about 
privacy.  I have read
draft-morris-privacy-considerations-03.  I could not find which point 
in that draft, the following is based:

   "The HOST_ID does not reveal more privacy information than what the
    source IP address does in a non-shared address environment"

Regards,
-sm 

_______________________________________________
Int-area mailing list
Int-area@ietf.org
https://www.ietf.org/mailman/listinfo/int-area