Re: Address privacy (was: Re: RFC4941bis: consequences of many addresses for the network)

[Ole Troan <[e-mail]>]

> On 26 Jan 2020, at 06:41, Christian Huitema <[e-mail]> wrote:
> 
> On 1/25/2020 4:18 PM, Jared Mauch wrote:
> 
>> I'm not convinced that I get more privacy by using the privacy
>> addresses and more than encoding my emails with rot13. 
>> 
>> The industry has far more advanced ways to fingerprint users. The data
>> done by https://amiunique.org/ folks as well as others make it clear
>> that IP addresses aren't the means of tracking that I believe the
>> concerns that introduced privacy addresses were attempting to solve.
> 
> Yes, there are many leaks. That not a reason to not plug our own leak,
> i.e. the use of IP addresses as unique identifiers. As the web leaks are
> progressively plugged by privacy oriented browsers or by fingerprint
> blocking add-ons, the importance of address privacy increases.

I do wonder if rotating the iid is significantly better than a stable per-link 7217 iid. 

Isn’t the first thing an application does to use the temporary address to authenticate with a service, that then turns around and sells the information abo the user to address mapping on the open market?
Ignoring all the cookies and other tracking mechanisms already in place...

Ole