Re: [Madinas] Call for adoption: draft-henry-madinas-framework

[Qin Wu <[e-mail]>]

Hi, WG:
I have read the latest version and support adoption of draft-henry-madinas-framework as informational RFC,
I am hoping this draft could also document some IoT related use cases, whether it is residential use case or campus, enterprise use cases.

I envision there are some good use cases in the residential setting, e.g, Only MAC address was needed to open some Smart Locks (https://cybersecuritynext.org/only-mac-address-was-needed-to-open-some-smart-locks-report/)

I am wondering how IoT device (e.g., smart lock) in the residential setting can be affected by device’s mac address sniff? Is RCM scheme better solution for them? How smart lock vendors implement RCM? Given the bad user experience to get on the home network with RCM scheme on, whether they will move away from MAC and IP address based access control and moving towards identity based access control.



When we say “To reduce the risks of correlation between a device activity and its owner, multiple vendors have started to implement Randomized and

Changing MAC addresses (RCM). ”, I want to make sure it is Mobile device vendors or OS vendors not IoT device vendor who start implement RCM, correct me, if I am wrong.



Regarding “such address change may affect the user experience and the efficiency of legitimate network operations.  ” I agree such changes will affect a lot the user experience. It is good to see privacy for end user has been improved, but it is at the cost of user experience deteriorating. I am wondering whether many of users will go through this painful onboarding process rather than abandon logging on some kind of guest network.



Last, I want to make sure there is no overlapping with use cases documented in WBA since we now position this document as use case document.

Thanks for taking my comments into consideration.



-Qin
发件人: Madinas [mailto:[e-mail]] 代表 Juan Carlos Zuniga
发送时间: 2021年11月10日 21:56
收件人: [e-mail]
抄送: Juan Carlos Zuniga <[e-mail]>; CARLOS JESUS BERNARDOS CANO <[e-mail]>
主题: [Madinas] Call for adoption: draft-henry-madinas-framework

Dear all,

Confirming what was said at the meeting, we are starting a Call for Adoption of https://datatracker.ietf.org/doc/html/draft-henry-madinas-framework-03

Please let us know if you support or oppose the adoption. Likewise, please let us know if you have any comments or suggestions.

Best,

Juan-Carlos & Carlos
MADINAS chairs


Your privacy is important to us. Please see our Privacy Notice<https://www.sigfox.com/en/privacy-and-cookies-policy> for further details. The information contained in this Message is confidential. If you are not the addressee, you may not copy, forward, disclose or use any part of it. If you have received this Message in error, please delete it and all copies from your system and notify the sender immediately by return message. Any use of information contained in this Message not in accordance with its intended purpose, any dissemination or disclosure (either whole or partial), is prohibited unless expressly authorized. Email communication cannot be guaranteed to be timely secure, error or virus-free. The sender cannot be held responsible for any alteration, errors or omissions, which arise as a result.

..................................................................................................................

La protection de vos données personnelles est primordiale pour notre établissement. Merci de consulter notre notice sur la protection des données personnelles <https://www.sigfox.com/en/privacy-and-cookies-policy> pour plus d’informations. Ce message et toutes les pièces jointes (ci-après le 'Message') sont établis à l'intention exclusive des destinataires. Les informations qui y figurent sont confidentielles. Si vous n'êtes pas le destinataire de ce Message, il vous est interdit de le copier, de le faire suivre, de le divulguer ou d'en utiliser tout ou partie. Si vous avez reçu ce Message par erreur, merci de le supprimer de votre système, ainsi que toutes ses copies, et de n'en garder aucune trace sur quelque support que ce soit. Veuillez également en avertir immédiatement l'expéditeur par retour du Message. Toute utilisation de ce Message non conforme à sa destination, toute diffusion ou toute publication totale ou partielle, est interdite sauf autorisation expresse. Il est impossible de garantir que les communications par messagerie électronique arrivent en temps utile, soient sécurisées ou dénuées de toute erreur ou virus. L'expéditeur ne peut être tenu responsable des modifications, erreurs ou omissions qui pourraient en résulter.