Re: FW: New Version Notification for draft-huitema-6man-random-addresses-00.txt

Hello,

Thanks for this draft.

I would like to comment one particular aspect.

Indeed, changing the IID as the MAC address changes is a good
idea.  It obviously enhances the privacy afforded.

But some correlation could still be performed by, e.g., analyzing the
MAC addresses in the time sequence of link-layer messaging (i.e. in WiFi
AssociationnRequest/Response).

Another tool attackers rely on to analyze traffic is to assume that the
length of the IID is always 64.  If that 64 were randomized as well
(e.g. MAC-48 would give an IID-49 now and a IID-50 later) then more
privacy could be provided, I think.

But yes, random link layer addresses, together with new lifetimes and,
why not - with multiple link-layer addresses on same interface may offer
more privacy.

Yours,

Alex

Le 01/07/2015 19:16, Christian Huitema a écrit :
> Following yesterday's discussion with Fernando, Alissa and Dave, I
> prepared this short draft explaining the interaction between MAC
> address randomization and IPv6 addressing privacy. If there is time
> on the agenda, I would be happy to discuss the subject in Prague.
>
> -- Christian Huitema
>
>
>
> -----Original Message----- From: internet-drafts@ietf.org
> [mailto:internet-drafts@ietf.org] Sent: Wednesday, July 1, 2015 10:13
> AM To: Christian Huitema; Christian Huitema Subject: New Version
> Notification for draft-huitema-6man-random-addresses-00.txt
>
>
> A new version of I-D, draft-huitema-6man-random-addresses-00.txt has
>  been successfully submitted by Christian Huitema and posted to the
> IETF repository.
>
> Name:		draft-huitema-6man-random-addresses Revision:	00 Title:
> Implications of Randomized Link Layers Addresses for IPv6 Address
> Assignment Document date:	2015-07-01 Group:		Individual Submission
> Pages:		8 URL:
> https://www.ietf.org/internet-drafts/draft-huitema-6man-random-addresses-00.txt
>
>
>
>
Status:
https://datatracker.ietf.org/doc/draft-huitema-6man-random-addresses/
> Htmlized:
> https://tools.ietf.org/html/draft-huitema-6man-random-addresses-00
>
>
> Abstract: Hosts may assign random link-layer addresses to network
> interfaces in an attempt to increase privacy and reduce trackability.
> Careless assignment of IPv6 addresses may negate the privacy
> advantages of random link-layer addresses.  We propose simple
> solutions to ensure that IPv6 addresses do change whenever the link
> layer addresses change.
>
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission until the htmlized version and diff are available at
> tools.ietf.org.
>
> The IETF Secretariat
>
> --------------------------------------------------------------------
> IETF IPv6 working group mailing list ipv6@ietf.org Administrative
> Requests: https://www.ietf.org/mailman/listinfo/ipv6
> --------------------------------------------------------------------
>