Re: [Madinas] I-D Action: draft-ietf-madinas-mac-address-randomization-10.txt

Hi Bob,

On Thu, Jan 11, 2024 at 6:39 PM Bob Hinden <bob.hinden@gmail.com> wrote:

> I believe I made similar comments a while back.   Repeating myself.
>
> 6. MAC randomization-related activities at the IETF
>
> This title is ambiguous (and Section 4 and 5 the same problem).   “at the
> IETF” sounds like at an IETF meeting and “activities” isn’t clear.
> Protocols are not “activities”   This should be something like:
>
>           MAC randomization in IETF Protocol Standards
>
> The text in this section starts with:
>
> Several IP address assignment mechanisms such as the IPv6 stateless
> autoconfiguration techniques (SLAAC) [RFC4862] generate the Interface
> Identifier (IID) of the address from its MAC address (via EUI64), which
> then becomes visible to all IPv6 communication peers. This potentially
> allows for global tracking of a device at L3 from any point on the
> Internet. Besides, the prefix part of the address provides meaningful
> insights of the physical location of the device in general, which together
> with the MAC address-based IID, makes it easier to perform global device
> tracking.
>
>
> This is wrong and out dated.   RFC 8064 "Recommendation on Stable IPv6
> Interface Identifiers” published in 2017 formally updated IPv6 IID
> selection to prefer RFC 7217 IIDs and recommends against embedding stable
> link-layer address in IPv6 IIDS.
>
> This section needs a serious rewrite.
>
> Today, I also noted in third paragraph of this section a reference to
> [RFC4191].  The text is:
>
> [RFC4191] identifies and describes the privacy issues associated with
> embedding MAC stable addressing information into the IPv6 addresses (as
> part of the IID) and describes some mechanisms to mitigate the associated
> problems.
>
>
> RFC4191 is "Default Router Preferences and More-Specific Routes”.  This
> has nothing to do with embedding MAC stable addresss.
>
>

It seems like RFC 4191 was a typo, it should have been
RFC 4941 Privacy Extensions for Stateless Address Autoconfiguration in IPv6

Regards,
Behcet

> Bob
>
>
> On Jan 11, 2024, at 3:02 AM, internet-drafts@ietf.org wrote:
>
> Internet-Draft draft-ietf-madinas-mac-address-randomization-10.txt is now
> available. It is a work item of the MAC Address Device Identification for
> Network and Application Services (MADINAS) WG of the IETF.
>
>   Title:   Randomized and Changing MAC Address state of affairs
>   Authors: Juan Carlos Zuniga
>            Carlos J. Bernardos
>            Amelia Andersdotter
>   Name:    draft-ietf-madinas-mac-address-randomization-10.txt
>   Pages:   18
>   Dates:   2024-01-11
>
> Abstract:
>
>   Internet privacy has become a major concern over the past few years.
>   Users are becoming more aware that their online activity leaves a
>   vast digital footprint, that communications are not always properly
>   secured, and that their location and actions can be easily tracked.
>   One of the main factors for the location tracking issue is the wide
>   use of long-lasting identifiers, such as MAC addresses.
>
>   There have been several initiatives at the IETF and the IEEE 802
>   standards committees to overcome some of these privacy issues.  This
>   document provides an overview of these activities, with the intention
>   to inform the technical community about them, and help coordinate
>   between present and future standardization activities.
>
> The IETF datatracker status page for this Internet-Draft is:
>
> https://datatracker.ietf.org/doc/draft-ietf-madinas-mac-address-randomization/
>
> There is also an HTMLized version available at:
>
> https://datatracker.ietf.org/doc/html/draft-ietf-madinas-mac-address-randomization-10
>
> A diff from the previous version is available at:
>
> https://author-tools.ietf.org/iddiff?url2=draft-ietf-madinas-mac-address-randomization-10
>
> Internet-Drafts are also available by rsync at:
> rsync.ietf.org::internet-drafts
>
>
> --
> Madinas mailing list
> Madinas@ietf.org
> https://www.ietf.org/mailman/listinfo/madinas
>
>
> --
> Madinas mailing list
> Madinas@ietf.org
> https://www.ietf.org/mailman/listinfo/madinas
>