Re: [MMUSIC] ICEbis and IPv6 Privacy adresses

Simon Perreault <sperreault@jive.com> Fri, 25 July 2014 12:39 UTC

Return-Path: <sperreault@jive.com>
X-Original-To: mmusic@ietfa.amsl.com
Delivered-To: mmusic@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31BED1B2820 for <mmusic@ietfa.amsl.com>; Fri, 25 Jul 2014 05:39:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.601
X-Spam-Level:
X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A-ygGoaIYqqd for <mmusic@ietfa.amsl.com>; Fri, 25 Jul 2014 05:39:32 -0700 (PDT)
Received: from mail-we0-f176.google.com (mail-we0-f176.google.com [74.125.82.176]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B98221A0028 for <mmusic@ietf.org>; Fri, 25 Jul 2014 05:39:31 -0700 (PDT)
Received: by mail-we0-f176.google.com with SMTP id q58so4089857wes.7 for <mmusic@ietf.org>; Fri, 25 Jul 2014 05:39:28 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=1mtAs8y0sjm2Nv33z27Ynu5AsqnUHpELaoLlTu+g7mc=; b=LvgEcqmKqChqYiqD93zYutTqxORFS80axGTvocmP3a7n3yEEzkTe7FAJwFceUANOGK /+AKtt7pZ9lfJA1ARK2cT1UXc4knCilYaV9bAxhNkCGcCvrqszFHOSaIT4M4rfxPPBTU PM0PbLI4Xynhw0B+s8lIgVIGnDFRBTW4UK8tThBsWHbSxIw0xAclKmIOIc9iNHC9Nnu9 VQbs/Qtz8u+u8gyA1Md4NXFV75ggZ0AangPS2+PE4eZ392HKxZdZVMsNuscqe1iO8RLT xl/f7KFrI8LzSOxRDzFapusSrVOOJ0z2JVKvZxbxrM6Q6+jreGxVoD+XM9tnC86HAuoQ bz2g==
X-Gm-Message-State: ALoCoQm5yOwI4FZFlc0H3kAIY4ijo8i7rlWx6tiNE1Et2WVwqiiczmUUpFB2CaPYSOx1Ta1HR+oX
X-Received: by 10.194.95.132 with SMTP id dk4mr3833138wjb.72.1406291968837; Fri, 25 Jul 2014 05:39:28 -0700 (PDT)
Received: from porto.nomis80.org ([2001:67c:1231:998:9dec:20b7:9edc:fe13]) by mx.google.com with ESMTPSA id ed14sm5528880wic.10.2014.07.25.05.39.27 for <mmusic@ietf.org> (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 25 Jul 2014 05:39:28 -0700 (PDT)
Message-ID: <53D24FFE.1040802@jive.com>
Date: Fri, 25 Jul 2014 08:39:26 -0400
From: Simon Perreault <sperreault@jive.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To: mmusic@ietf.org
References: <5353C0F5-5769-4C56-9A8A-1C884A7F8CC3@cisco.com> <CAOJ7v-2zgVhSkjWAeoZ-5wDy=GYdTYSDbsDvgVpY62OOkm8L-w@mail.gmail.com>
In-Reply-To: <CAOJ7v-2zgVhSkjWAeoZ-5wDy=GYdTYSDbsDvgVpY62OOkm8L-w@mail.gmail.com>
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
Archived-At: http://mailarchive.ietf.org/arch/msg/mmusic/2c0gZ7fFZZV4j0wfrI6SZZsagdA
Subject: Re: [MMUSIC] ICEbis and IPv6 Privacy adresses
X-BeenThere: mmusic@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Multiparty Multimedia Session Control Working Group <mmusic.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/mmusic>, <mailto:mmusic-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/mmusic/>
List-Post: <mailto:mmusic@ietf.org>
List-Help: <mailto:mmusic-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/mmusic>, <mailto:mmusic-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Jul 2014 12:39:34 -0000

Le 2014-07-24 22:33, Justin Uberti a écrit :
> I believe the point of temporary addresses is to prevent tracking, not
> to prevent computing an approximate location. Therefore I don't think we
> need to do anything about the other (non-trackable) addresses.

Uh? Other addresses *are* trackable, that's the whole point.

The addresses I have right now:

>     inet6 2001:67c:1231:998:9dec:20b7:9edc:fe13/64 scope global temporary dynamic 
>        valid_lft 604798sec preferred_lft 604798sec
>     inet6 2001:67c:1231:998:8e70:5aff:fec5:72e4/64 scope global dynamic 
>        valid_lft 2591999sec preferred_lft 2591999sec
>     inet6 fe80::8e70:5aff:fec5:72e4/64 scope link 
>        valid_lft forever preferred_lft forever

Only the privacy address is not trackable. The other two have fixed
lower 64 bits.

I think Pål's request makes a lot of sense for host candidates.
Server-reflexive and relayed candidates don't matter as they are not
trackable. Asking a TURN server to use a temporary address doesn't make
sense either IMHO.

Therefore, proposed text:

If one or more host candidates corresponding to IPv6 privacy addresses
are advertised, host candidates corresponding to other kinds of IPv6
addresses on the same interface MUST NOT be advertised.

Simon