Re: [IPFIX] Review of draft-irtf-nmrg-location-ipfix-07.txt

[Abdelkader Lahmadi <[e-mail]>]

Hi,
Thank you for the feedback. please see comments inline, I hope that they help make things clear.
> On 23 Nov 2016, at 12:02, Stewart Bryant <[e-mail]> wrote:
> 
> 
> Collecting this data is not particularly difficult, but protecting the privacy is much harder and will, I imagine be subject to significant scrutiny as the draft progresses.

The core subject of the draft is far from providing solutions of privacy issues when collecting sensitive data. We have clearly mentioned the privacy issue in our draft in section ’Security and Privacy Considerations’. In the section we have referenced existing RFCs that have addressed this issue for location information : [RFC3694], [RFC3693] and also Flow record anonymization [RFC6235].

> 
> It seems to me that there are security and privacy issues concerning both the traffic and the collector itself. The privacy of the user is a widely understood concept and will I am sure be thoroughly examined in review. In the case of the collector I am not convinced that it is wise to reveal the precise location of the network infrastructure since this could result in it being subject to physical attack.

In my opinion, we can also imagine another scenario where location information will help operators to identify that their equipments have not be moved or stolen, so associating IP flows to the location of the device is helpful in this case.

> 
> An approach that you do not seem to explore is encrypting the location record so that this can only be understood by those that are authorised to see it.

We have mentioned in the section ’Security and privacy Consideration’ that location information SHOULD be signed and encrypted as specified in [RFC7011].

> Indeed there is a case for something analogous to the selective availability system in GPS whereby the location is provided with different degrees of precision depending on the authority of the user.
> 
In section ‘Enabling Location Extensions’, we have mentioned that the metering process selects a location method when many are available with different degrees of precision. Yes, we can make it more clear by also mentioning that the selection depends on the authority of the user.
Best regards,


> - Stewart
> 
> 
> On 23/11/2016 02:33, Zhoutianran wrote:
>> Hi,
>> 
>> Though IPFIX is concluded, could the IPFIX experts in this mailing list please help to provide comments for this I-D?
>> https://datatracker.ietf.org/doc/draft-irtf-nmrg-location-ipfix
>> 
>> It seems this work has a long history. Your help will push this work a step forward.
>> 
>> 
>> Thanks,
>> Tianran
>> 
>> _______________________________________________
>> IPFIX mailing list
>> [e-mail]
>> https://www.ietf.org/mailman/listinfo/ipfix
> 
> _______________________________________________
> IPFIX mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/ipfix