Re: draft-gont-6man-managing-privacy-extensions-00.txt

RJ Atkinson <rja.lists@gmail.com> Wed, 09 March 2011 15:50 UTC

Return-Path: <rja.lists@gmail.com>
X-Original-To: ipv6@core3.amsl.com
Delivered-To: ipv6@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D490B3A6A2E for <ipv6@core3.amsl.com>; Wed, 9 Mar 2011 07:50:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.939
X-Spam-Level:
X-Spam-Status: No, score=-2.939 tagged_above=-999 required=5 tests=[AWL=-0.340, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Em5xvNWQefwh for <ipv6@core3.amsl.com>; Wed, 9 Mar 2011 07:50:46 -0800 (PST)
Received: from mail-vx0-f172.google.com (mail-vx0-f172.google.com [209.85.220.172]) by core3.amsl.com (Postfix) with ESMTP id CDA1B3A6859 for <ipv6@ietf.org>; Wed, 9 Mar 2011 07:50:45 -0800 (PST)
Received: by vxg33 with SMTP id 33so718306vxg.31 for <ipv6@ietf.org>; Wed, 09 Mar 2011 07:52:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:content-type:mime-version:subject:from :in-reply-to:date:content-transfer-encoding:message-id:references:to :x-mailer; bh=IrodK8VP2ItRkhQO6j+bzyi9xhzSeWuhbB7ffb95HDE=; b=CkI+hK60pWGNGl/hAIUZyKZCB1FcO5LDl1MqEKIygaYugQORU2rzLlqJK4GaI82LgV 4x1GLrTRjltnCv6i/LxuF8nfhdyDo/8WXigEHpFkAPiq5d7rFKeO/gy7CnJ2N0DRU/qB Xm7UosOdjbJUIzwzXN1j80xYTllUVeFMogeko=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=content-type:mime-version:subject:from:in-reply-to:date :content-transfer-encoding:message-id:references:to:x-mailer; b=o84kAW0zsCU236DKUbvJMUctycZHWbwXefTMpxPYuqgrFKQKUDTNc7byTbECMR5tPx qq5OByACaPuUmmDnXVYzChkBolyfouBaxbvvetpBgLD0mYzc4niIF+vH3z0VBNCGiuji u5meYZm2Y1K/evX1h3phKAVoQDw+0iyCJfDks=
Received: by 10.52.18.47 with SMTP id t15mr4746044vdd.48.1299685921511; Wed, 09 Mar 2011 07:52:01 -0800 (PST)
Received: from [10.30.20.7] (pool-96-225-170-25.nrflva.fios.verizon.net [96.225.170.25]) by mx.google.com with ESMTPS id bm19sm381914vdb.10.2011.03.09.07.52.00 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 09 Mar 2011 07:52:00 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Apple Message framework v1082)
Subject: Re: draft-gont-6man-managing-privacy-extensions-00.txt
From: RJ Atkinson <rja.lists@gmail.com>
In-Reply-To: <alpine.DEB.1.10.1103091552560.7942@uplift.swm.pp.se>
Date: Wed, 09 Mar 2011 10:51:59 -0500
Content-Transfer-Encoding: 7bit
Message-Id: <BD1A42A7-CCD4-4625-94C6-037FD8C3CF2C@gmail.com>
References: <7111FC5F-BC3F-4242-9C3F-037E79894749@gmail.com> <alpine.DEB.1.10.1103091212570.7942@uplift.swm.pp.se> <AANLkTim7W3BCCgW_Hpvr3p+SdYobpk-yoZYTtbWxL14r@mail.gmail.com> <alpine.DEB.1.10.1103091552560.7942@uplift.swm.pp.se>
To: ipv6@ietf.org
X-Mailer: Apple Mail (2.1082)
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ipv6>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Mar 2011 15:50:46 -0000

On 09  Mar 2011, at 09:57 , Mikael Abrahamsson wrote:
> Privacy Extensions is not the only mechanisms that might create an
> address to be used, thus I think the "disable privacy" flag is meaningless.
> 
> If you want to know the mac address of the computer who used an
> IP address at a certain time, then you need to tell the host
> to only use EUI64 based address and nothing else, you don't tell it
> to disable privacy extensions.
> 
> Just because privacy extensions is the only address widely seen
> today as being non-EUI64, doesn't mean that if you disable privacy,
> you get only single EUI64.

The above is a very helpful clarification.  

Based on that, I agree with Mikael that the correct semantic 
to the flag should be to require direct/embedded use of a 
hardware MAC value for the IPv6 IID.  That would disallow 
not only the (pseudo-)Privacy addresses, but any other kind 
of addressing that would not embed a hardware address in the IID.



REQUEST for Fernando G/Ron B:
	Separately, keeping the quoted comments above in mind, the I-D
	draft-gont-6man-managing-privacy-extensions needs clarification 
	edits to avoid using the phrase "hardware-derived" anywhere.

REASON:
	Any (pseudo-) Privacy address is derived ("computed") using the 
	MAC address as a seed (at least originally). [RFC-3041, Seection 3.2]

	So it is confusing and not clear to say "hardware-derived",
	when one means that the system ought to only use IIDs that
	are embedded IEEE MAC addresses (whether 802, Firewire, or BlueTooth)
	or some other embedded hardware address type.


Cheers,

Ran