IETF Logo Mail Archive

Re: [v6ops] Alissa Cooper's Discuss on draft-ietf-v6ops-unique-ipv6-prefix-per-host-12: (with DISCUSS)

"Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com> Mon, 16 October 2017 07:50 UTC

Return-Path: <gunter.van_de_velde@nokia.com>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CF6013445B; Mon, 16 Oct 2017 00:50:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.699
X-Spam-Level:
X-Spam-Status: No, score=-4.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nokia.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IxFkf0nINA7H; Mon, 16 Oct 2017 00:50:38 -0700 (PDT)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0118.outbound.protection.outlook.com [104.47.1.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4AA3134457; Mon, 16 Oct 2017 00:50:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.onmicrosoft.com; s=selector1-nokia-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=HX4VMxGq8I3YIMaLoSAy3ZM3quCqUHnbgRi2TVd0VoM=; b=iMbDFzeTOe03Psyzz6p+34FpiG6moYaZ5M38NwTp+37YG7H0T8aCCaPlz9rLL2jg1dEky0c7StEGADkJRRIrb6cAnai0knGR0ThtPd4Vvlis8V8bQ640ivgbTmUXNXngdJRnLFruXKsd+PLRrDB5rH26XW7fm7TC2rc7X52AzIo=
Received: from AM5PR0701MB2836.eurprd07.prod.outlook.com (10.168.155.139) by AM5PR0701MB2834.eurprd07.prod.outlook.com (10.168.155.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.156.2; Mon, 16 Oct 2017 07:50:34 +0000
Received: from AM5PR0701MB2836.eurprd07.prod.outlook.com ([fe80::a408:c2f3:aaa1:2cc3]) by AM5PR0701MB2836.eurprd07.prod.outlook.com ([fe80::a408:c2f3:aaa1:2cc3%14]) with mapi id 15.20.0077.022; Mon, 16 Oct 2017 07:50:34 +0000
From: "Van De Velde, Gunter (Nokia - BE/Antwerp)" <gunter.van_de_velde@nokia.com>
To: Lorenzo Colitti <lorenzo@google.com>, Ted Lemon <mellon@fugue.com>
CC: Tom Herbert <tom@herbertland.com>, "v6ops@ietf.org WG" <v6ops@ietf.org>, Alissa Cooper <alissa@cooperw.in>, "draft-ietf-v6ops-unique-ipv6-prefix-per-host@ietf.org" <draft-ietf-v6ops-unique-ipv6-prefix-per-host@ietf.org>, "draft-ietf-v6ops-unique-ipv6-prefix-per-host.all@ietf.org" <draft-ietf-v6ops-unique-ipv6-prefix-per-host.all@ietf.org>, "v6ops-chairs@ietf.org" <v6ops-chairs@ietf.org>, The IESG <iesg@ietf.org>
Thread-Topic: [v6ops] Alissa Cooper's Discuss on draft-ietf-v6ops-unique-ipv6-prefix-per-host-12: (with DISCUSS)
Thread-Index: AQHTQ2GHOLIosEjwVke5BRewOZCN8qLgYgwAgAAIawCAAAMsgIAABzkAgAACcQCAAlwCAIADS4rw
Date: Mon, 16 Oct 2017 07:50:34 +0000
Message-ID: <AM5PR0701MB2836163DCE6BEE33B8CFFD59E04F0@AM5PR0701MB2836.eurprd07.prod.outlook.com>
References: <150781642636.16695.9645155481311700959.idtracker@ietfa.amsl.com> <CAKD1Yr2vW2Ngh=q2D84Vpmv9XbAkF5Cxu=Emq3pMV4wROQ-0Vw@mail.gmail.com> <CALx6S34QE40N0a4J=+q8vrkEB1Rue_LG129CHqgDhiSOmCptww@mail.gmail.com> <1584986D-0585-4D38-8127-8AC23EDC6154@consulintel.es> <CALx6S350+MSd--fCOPL9vnaf0BGUf5rHX5q+84MvvvOOJ6pQ9w@mail.gmail.com> <8508AC0E-22AB-4F75-B79F-09FCB7FCA792@fugue.com> <CAKD1Yr2xyG_-nQZdZSvETCxNmNc+pjPwx=NQNC4gPO4967cqMg@mail.gmail.com>
In-Reply-To: <CAKD1Yr2xyG_-nQZdZSvETCxNmNc+pjPwx=NQNC4gPO4967cqMg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=gunter.van_de_velde@nokia.com;
x-originating-ip: [2a02:1810:4d67:a00:49da:cc22:4441:2b3d]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; AM5PR0701MB2834; 6:91+q3yFXI3eIq0IZQx04y/9XwIOpMBNaCC0KcSSHTscLaiAzo94MuFqmUhLpGCZLEtX+5+Qr6SpLtM5uD4uU2fWz0TBJWNpK4xNuq9miil6N4LobhAFJL7otSldtdFCNnh9X89J8qiBQZzUR+pva2DHeUnbFm1MdC7HW4PUBllUIiBYiAte3rLpK/6ZW2SJfeS8e5PyskEAb6nzNCIpT1vrgkc7XsSDsZ1ivDBg9G71v3io9hb4ksQ6/E7kEzjoxcoSr6uq0ld7SkC1HULY+q6sWFPRjB7ygTHk1GXyCcpD/J253I59xK3Fy22A/EvvY6N0o4aGWV9YGkSB48zZS4g==; 5:Ymfn1ZLSLCtAFOq2cKuJ2Eg228O3LzJMFsL0QoxVtVd+iq9F7fv8kslH61dQ+0I/L+ZYxikMVdwGY2X7fmoZwRKJwNCNfQDq19BeP0IkAI3pCYgPOC3rC/gq4JQTLntSUu0r2WE9+c2k0Nh9rEAGAl8NHu9cAKSbOKpzqK7VstI=; 24:Iwpv28k0wSaleQcUmu6toQLaxyYqYs4Xp4H+b3HVVU9vCuFsAnXuYkSkksGYjnoEgD+rNJHS/AL24c06UhzPufqo11oTrh9xC+27zIi3BbQ=; 7:iRu2RTIR5+gUqA2Uwrm9K4djYIsdmp6s364n53Xu9GalB0B1fvepPmOeulbTbs+gWoQxmy+xUoNWarahI3S5VtVgCSsGblkSxLZ4oUC2lJ9QD9RBy/D99GZ2W8eUEfgXRpm3M2E05Tu060rgXakkSjB6wZW3TAh9qQ+qRKj4TDJZgU5LJ63XoKxIPk5dGAIo9zkzvWn/2uJ4FgCrwjLi27Y2p3oIekLFa5eNZEqz6Gg=
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: b69cd61a-fc2b-4527-d4c0-08d5146a9531
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(2017030254152)(48565401081)(2017052603199)(201703131423075)(201703031133081)(201702281549075); SRVR:AM5PR0701MB2834;
x-ms-traffictypediagnostic: AM5PR0701MB2834:
x-exchange-antispam-report-test: UriScan:(211936372134217)(21748063052155);
x-microsoft-antispam-prvs: <AM5PR0701MB2834C19DB3A69D73707B98C6E04F0@AM5PR0701MB2834.eurprd07.prod.outlook.com>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(93006095)(93001095)(3002001)(10201501046)(920507026)(6055026)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123564025)(20161123560025)(20161123558100)(20161123555025)(20161123562025)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:AM5PR0701MB2834; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:AM5PR0701MB2834;
x-forefront-prvs: 0462918D61
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(39860400002)(376002)(24454002)(199003)(189002)(377454003)(19609705001)(102836003)(6116002)(790700001)(189998001)(8676002)(110136005)(34040400001)(7736002)(6246003)(4326008)(86362001)(54906003)(53936002)(5250100002)(81166006)(81156014)(8936002)(74316002)(6506006)(101416001)(229853002)(93886005)(6436002)(14454004)(50986999)(97736004)(3660700001)(5660300001)(25786009)(53546010)(230783001)(316002)(106356001)(105586002)(7696004)(76176999)(2900100001)(6306002)(54896002)(2906002)(236005)(9686003)(55016002)(99286003)(2950100002)(68736007)(54356999)(478600001)(3280700002)(33656002); DIR:OUT; SFP:1102; SCL:1; SRVR:AM5PR0701MB2834; H:AM5PR0701MB2836.eurprd07.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: nokia.com does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_AM5PR0701MB2836163DCE6BEE33B8CFFD59E04F0AM5PR0701MB2836_"
MIME-Version: 1.0
X-OriginatorOrg: nokia.com
X-MS-Exchange-CrossTenant-Network-Message-Id: b69cd61a-fc2b-4527-d4c0-08d5146a9531
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Oct 2017 07:50:34.4171 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2834
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/YdJjPhcmG-RCJz56kO8Ciq9f_Fc>
Subject: Re: [v6ops] Alissa Cooper's Discuss on draft-ietf-v6ops-unique-ipv6-prefix-per-host-12: (with DISCUSS)
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Oct 2017 07:50:40 -0000

Lorenzo, This text seems indeed as a reasonable suggestion to ensure that the host has a method to ensure its privacy if desired which is mainly under its own control.

G/

From: Lorenzo Colitti [mailto:lorenzo@google.com]
Sent: Saturday, October 14, 2017 07:27
To: Ted Lemon <mellon@fugue.com>
Cc: Tom Herbert <tom@herbertland.com>; v6ops@ietf.org WG <v6ops@ietf.org>; Alissa Cooper <alissa@cooperw.in>; draft-ietf-v6ops-unique-ipv6-prefix-per-host@ietf.org; draft-ietf-v6ops-unique-ipv6-prefix-per-host.all@ietf.org; v6ops-chairs@ietf.org; The IESG <iesg@ietf.org>
Subject: Re: [v6ops] Alissa Cooper's Discuss on draft-ietf-v6ops-unique-ipv6-prefix-per-host-12: (with DISCUSS)

On Fri, Oct 13, 2017 at 2:25 AM, Ted Lemon <mellon@fugue.com<mailto:mellon@fugue.com>> wrote:
In point of fact, the mechanism described in the document uses the host link-layer address as a unique identifier.   So a host that wants a variable prefix just needs to use a different link-layer address for router solicitation from time to time.   This can be done transparently, and indeed in principle the host can acquire two prefixes, one long-lived and one short-lived.   Of course, this is likely problematic, but you get the idea: the association of the prefix to a particular host is entirely within the control of that host.

That's a great way to solve this problem, Ted. How about the following text?

If the operator assigns the same unique prefix to the same link-layer address every time a host connects, any remote party who is aware of this fact can easily track a host simply by tracking its assigned prefix. This nullifies the benefit provided by privacy addresses [RFC4941]. If a host wishes to maintain privacy on such networks, it SHOULD ensure that its link-layer address is periodically changed or randomized.

v2.23.0 | Report a Bug | By Email