[sacm] ECP question

Dan Ehrlich <dan@ehrlichserver.com> Sat, 13 April 2019 00:42 UTC

Return-Path: <dan@ehrlichserver.com>
X-Original-To: sacm@ietfa.amsl.com
Delivered-To: sacm@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B050120447 for <sacm@ietfa.amsl.com>; Fri, 12 Apr 2019 17:42:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ehrlichserver.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 67q56uI_T5kx for <sacm@ietfa.amsl.com>; Fri, 12 Apr 2019 17:42:22 -0700 (PDT)
Received: from mail-lj1-x22c.google.com (mail-lj1-x22c.google.com [IPv6:2a00:1450:4864:20::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 017381203C1 for <sacm@ietf.org>; Fri, 12 Apr 2019 17:42:21 -0700 (PDT)
Received: by mail-lj1-x22c.google.com with SMTP id v22so10407038lje.9 for <sacm@ietf.org>; Fri, 12 Apr 2019 17:42:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ehrlichserver.com; s=google; h=mime-version:from:date:message-id:subject:to; bh=0j/NMTH4S3oL5OSMCedRvkkqzOWY+nNmqkQUaknGLsQ=; b=PgqEhlC48NWL1nOJcy0fZGVUvtlUsiqjkNrud+3YcNxWcQvt6N7nkWOgzlOzeivJzk dIoM72VxnTCMnsGup19/BQ31aRxuFsLwa7ShQKvkruOtBGSlwh2lLWeJH6N3rnqESmUR 3dX9JysxzUaSzEPRcHsLc/im1757DVBflPGyo=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=0j/NMTH4S3oL5OSMCedRvkkqzOWY+nNmqkQUaknGLsQ=; b=pfa1yXlTvUU0gdcxow3ODxnRGaFlh5Dw9rzq1ipWiljrim3KcqnjNELdEDXflIqQTj NlhXFVgCLNquB3FhN2/GV6q3TOX+DHXKEphYZ7CneqiHbtdFA1Jof8Cdfap/suYxvaZ/ LhXOecsEbVtf8RdUvhKIUC8xFkYQAOi4n7cTsylhSaN8AwxxdKlW6t/1Q7vwUp6NLs0f EtuwDsRnmHTg+BctjP3w96kaDvpL/WoA4ejV/TWmz6nwlxKW27bY9rH2bic1FO7G8mW4 Y1J/+p2PWJ2+/O+KdL/dSzucfitpHleock5DPZJ+dhBOp4iONxo5CP3+lXr4qUq6TzAq tOXA==
X-Gm-Message-State: APjAAAWngnLeGkHdExo7j7qzJ2ePmpvmxS97g09Ybqm5d3xAI1+8qjto cZbupEBcyCQ434Bsong+xVcH5ft4Vr3V3D9Iu3lgsw==
X-Google-Smtp-Source: APXvYqy7W4n+hOUQd+PBqsbLXIz0ILYVY3WulRMzZOXNjCV5nfEKc75T+jjRy4S1buaSwsuLse0maYdkRlANVy4Sawo=
X-Received: by 2002:a2e:8693:: with SMTP id l19mr31566322lji.47.1555116140141; Fri, 12 Apr 2019 17:42:20 -0700 (PDT)
MIME-Version: 1.0
From: Dan Ehrlich <dan@ehrlichserver.com>
Date: Fri, 12 Apr 2019 17:42:08 -0700
Message-ID: <CAABgnxisAZdgVWH11Rp-6NoNhwDnFUz2Bc3wYez-oCb0LA0JFQ@mail.gmail.com>
To: "draft-ietf-sacm-ecp@ietf.org" <draft-ietf-sacm-ecp@ietf.org>, "sacm@ietf.org" <sacm@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000001e2f2d05865eb131"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sacm/hz2irmTYfslw1OS2kOtGDm8vOrI>
Subject: [sacm] ECP question
X-BeenThere: sacm@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: SACM WG mail list <sacm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sacm>, <mailto:sacm-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sacm/>
List-Post: <mailto:sacm@ietf.org>
List-Help: <mailto:sacm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sacm>, <mailto:sacm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Apr 2019 00:42:24 -0000

In the RFC for ECP, there is a section that mentions the potential use of
MAC addresses for identifying endpoints.

My understanding is that there are many things wrong with MAC addresses
today, such as that they can now be changed randomly by software, can't
really be verified, can be spoofed easily, etc.

I cannot find the link I was using from yesterday, but can the MAC address
mention be removed from ECP?


Apologies if I viewed an old draft or if this was previously discussed,

Dan Ehrlich
Austin, Texas
https://linkedin.com/in/danehrlich/
<https://www.linkedin.com/in/danehrlich/>