Re: [v6ops] Google Alert - IPv6

[Tom Herbert <[e-mail]>]

On Thu, Oct 26, 2017 at 1:15 PM, Dave O'Reilly <[e-mail]> wrote:
> Hello everybody,
>
> I’m the author of https://tools.ietf.org/html/draft-daveor-cgn-logging-01. Warren brought this thread to my attention so I would like to throw in a few thoughts for people to consider, if I may. I have attempted to address as many as possible of the points raised by others in the thread in one big response below.
>
> Thanks for taking the time to read this and I look forward to any feedback you might have,
> daveor
>
>
> On the topic of “CGNAT is a bad idea”
> ——————————————————————————————
>
> I am not too sure how much mileage there is getting caught up in this point. CGNAT is out there in the world, along with a suite of other large-scale address sharing technologies, and although the transition to IPv6 is ongoing, it is painfully slow and transitionary arrangements will be required for the foreseeable future.
>
> It would be, in my opinion, remiss of the criminal justice system not to consider this issue. The argument that the CGNAT problem will go away if we were all to just move to IPv6 doesn’t help solve the murder that happened today or catch the person distributing child pornography on the Internet.
>
Dave,

The flip side to this coin is that if good guys are able to track IPv6
addresses more easily, then that means the bad guys will be able to
also. Today it may be the case that CGNAT inadvertently offers better
privacy for users that IPv6 would (without any consideration why users
want privacy). So there should be a concern about the privacy of IPv6.
The likely solution is to allow hosts to use untrackable IP addresses,
maybe they would want to use a different IP address for each
connection. There are proposals for this.

If hosts use untrackable addresses, then privacy properties of IPv6
and CGNAT should be nearly equivalent. So the solution to assist law
enforcement ends up being the the same as that for CGNAT. A provider
maintains a log of mappings from the IP addresses to users and
releases information to authorities under warrant. It seems like this
is a logical extension to your draft.

Tom