Re: [Madinas] I-D Action: draft-ietf-madinas-mac-address-randomization-10.txt

Hi Bob, all,

We have just posted a new version addressing your comments.

Thanks!

Carlos

On Sat, Jan 13, 2024 at 8:46 PM Bob Hinden <bob.hinden@gmail.com> wrote:

> Thanks
> Bob
>
>
>
> On Jan 12, 2024, at 12:33 PM, CARLOS JESUS BERNARDOS CANO <cjbc@it.uc3m.es>
> wrote:
>
> Hi Bob,
>
> Sorry, I think I overlooked your previous comment. I'll update the draft
> next week.
>
> Thanks!
>
> Carlos
>
> On Fri, Jan 12, 2024 at 1:38 AM Bob Hinden <bob.hinden@gmail.com> wrote:
>
>> I believe I made similar comments a while back.   Repeating myself.
>>
>> 6. MAC randomization-related activities at the IETF
>>
>> This title is ambiguous (and Section 4 and 5 the same problem).   “at the
>> IETF” sounds like at an IETF meeting and “activities” isn’t clear.
>> Protocols are not “activities”   This should be something like:
>>
>>           MAC randomization in IETF Protocol Standards
>>
>> The text in this section starts with:
>>
>> Several IP address assignment mechanisms such as the IPv6 stateless
>> autoconfiguration techniques (SLAAC) [RFC4862] generate the Interface
>> Identifier (IID) of the address from its MAC address (via EUI64), which
>> then becomes visible to all IPv6 communication peers. This potentially
>> allows for global tracking of a device at L3 from any point on the
>> Internet. Besides, the prefix part of the address provides meaningful
>> insights of the physical location of the device in general, which together
>> with the MAC address-based IID, makes it easier to perform global device
>> tracking.
>>
>>
>> This is wrong and out dated.   RFC 8064 "Recommendation on Stable IPv6
>> Interface Identifiers” published in 2017 formally updated IPv6 IID
>> selection to prefer RFC 7217 IIDs and recommends against embedding stable
>> link-layer address in IPv6 IIDS.
>>
>> This section needs a serious rewrite.
>>
>> Today, I also noted in third paragraph of this section a reference to
>> [RFC4191].  The text is:
>>
>> [RFC4191] identifies and describes the privacy issues associated with
>> embedding MAC stable addressing information into the IPv6 addresses (as
>> part of the IID) and describes some mechanisms to mitigate the associated
>> problems.
>>
>>
>> RFC4191 is "Default Router Preferences and More-Specific Routes”.  This
>> has nothing to do with embedding MAC stable addresss.
>>
>> Bob
>>
>>
>> On Jan 11, 2024, at 3:02 AM, internet-drafts@ietf.org wrote:
>>
>> Internet-Draft draft-ietf-madinas-mac-address-randomization-10.txt is now
>> available. It is a work item of the MAC Address Device Identification for
>> Network and Application Services (MADINAS) WG of the IETF.
>>
>>   Title:   Randomized and Changing MAC Address state of affairs
>>   Authors: Juan Carlos Zuniga
>>            Carlos J. Bernardos
>>            Amelia Andersdotter
>>   Name:    draft-ietf-madinas-mac-address-randomization-10.txt
>>   Pages:   18
>>   Dates:   2024-01-11
>>
>> Abstract:
>>
>>   Internet privacy has become a major concern over the past few years.
>>   Users are becoming more aware that their online activity leaves a
>>   vast digital footprint, that communications are not always properly
>>   secured, and that their location and actions can be easily tracked.
>>   One of the main factors for the location tracking issue is the wide
>>   use of long-lasting identifiers, such as MAC addresses.
>>
>>   There have been several initiatives at the IETF and the IEEE 802
>>   standards committees to overcome some of these privacy issues.  This
>>   document provides an overview of these activities, with the intention
>>   to inform the technical community about them, and help coordinate
>>   between present and future standardization activities.
>>
>> The IETF datatracker status page for this Internet-Draft is:
>>
>> https://datatracker.ietf.org/doc/draft-ietf-madinas-mac-address-randomization/
>>
>> There is also an HTMLized version available at:
>>
>> https://datatracker.ietf.org/doc/html/draft-ietf-madinas-mac-address-randomization-10
>>
>> A diff from the previous version is available at:
>>
>> https://author-tools.ietf.org/iddiff?url2=draft-ietf-madinas-mac-address-randomization-10
>>
>> Internet-Drafts are also available by rsync at:
>> rsync.ietf.org::internet-drafts
>>
>>
>> --
>> Madinas mailing list
>> Madinas@ietf.org
>> https://www.ietf.org/mailman/listinfo/madinas
>>
>>
>> --
>> Madinas mailing list
>> Madinas@ietf.org
>> https://www.ietf.org/mailman/listinfo/madinas
>>
>
>