Re: [Madinas] Best Practices for MAC Address handling..

[Stephen Farrell <[e-mail]>]

On 30/10/2020 17:15, Michael Peddemors wrote:
> I think that I speak for many infosec people, that I agree that MAC 
> addresses should NOT be randomly generated, but instead fixed.

FWIW, speaking as someone interested in security
and privacy, I disagree. But both things are kinda
moot - OSes can and are doing this, so we can say
what we do/don't like but they'll still do it.
(And there are valid reasons for that.)

Aside from that, one of my hopes for this BoF is
that it not degenerate into "camps" e.g. of those
that want to see better privacy or those you refer
to as "the infosec community."

We've followed that destructive path a couple of
times now, and ISTM it leads nowhere.

I hope, in this case, that we instead focus on how
to both improve privacy and try find new ways to do
the kinds of access control that previously depended
on hard-coded long lived identifiers like MAC addresses,
particularly for interfaces that move around with
people.

Cheers,
S.