draft-ietf-6lo-privacy-considerations-02.txt   draft-ietf-6lo-privacy-considerations-03.txt 
Network Working Group D. Thaler Network Working Group D. Thaler
Internet-Draft Microsoft Internet-Draft Microsoft
Intended status: Informational July 29, 2016 Intended status: Informational September 13, 2016
Expires: January 30, 2017 Expires: March 17, 2017
Privacy Considerations for IPv6 over Networks of Resource-Constrained Privacy Considerations for IPv6 over Networks of Resource-Constrained
Nodes Nodes
draft-ietf-6lo-privacy-considerations-02 draft-ietf-6lo-privacy-considerations-03
Abstract Abstract
This document discusses how a number of privacy threats apply to This document discusses how a number of privacy threats apply to
technologies designed for IPv6 over networks of resource-constrained technologies designed for IPv6 over networks of resource-constrained
nodes, and provides advice to protocol designers on how to address nodes, and provides advice to protocol designers on how to address
such threats in adaptation layer specifications for IPv6 over such such threats in adaptation layer specifications for IPv6 over such
links. links.
Status of This Memo Status of This Memo
skipping to change at page 1, line 35 skipping to change at page 1, line 35
Internet-Drafts are working documents of the Internet Engineering Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet- working documents as Internet-Drafts. The list of current Internet-
Drafts is at http://datatracker.ietf.org/drafts/current/. Drafts is at http://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress." material or to cite them other than as "work in progress."
This Internet-Draft will expire on January 30, 2017. This Internet-Draft will expire on March 17, 2017.
Copyright Notice Copyright Notice
Copyright (c) 2016 IETF Trust and the persons identified as the Copyright (c) 2016 IETF Trust and the persons identified as the
document authors. All rights reserved. document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of (http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents publication of this document. Please review these documents
skipping to change at page 2, line 17 skipping to change at page 2, line 17
Table of Contents Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2
2. Amount of Entropy Needed in Global Addresses . . . . . . . . 3 2. Amount of Entropy Needed in Global Addresses . . . . . . . . 3
3. Potential Approaches . . . . . . . . . . . . . . . . . . . . 4 3. Potential Approaches . . . . . . . . . . . . . . . . . . . . 4
3.1. IEEE-Identifier-Based Addresses . . . . . . . . . . . . . 5 3.1. IEEE-Identifier-Based Addresses . . . . . . . . . . . . . 5
3.2. Short Addresses . . . . . . . . . . . . . . . . . . . . . 6 3.2. Short Addresses . . . . . . . . . . . . . . . . . . . . . 6
4. Recommendations . . . . . . . . . . . . . . . . . . . . . . . 6 4. Recommendations . . . . . . . . . . . . . . . . . . . . . . . 6
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 7 5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 7
6. Security Considerations . . . . . . . . . . . . . . . . . . . 7 6. Security Considerations . . . . . . . . . . . . . . . . . . . 7
7. References . . . . . . . . . . . . . . . . . . . . . . . . . 7 7. Informative References . . . . . . . . . . . . . . . . . . . 7
7.1. Normative References . . . . . . . . . . . . . . . . . . 7
7.2. Informative References . . . . . . . . . . . . . . . . . 8
Author's Address . . . . . . . . . . . . . . . . . . . . . . . . 10 Author's Address . . . . . . . . . . . . . . . . . . . . . . . . 10
1. Introduction 1. Introduction
RFC 6973 [RFC6973] discusses privacy considerations for Internet RFC 6973 [RFC6973] discusses privacy considerations for Internet
protocols, and Section 5.2 in particular covers a number of privacy- protocols, and Section 5.2 in particular covers a number of privacy-
specific threats. In the context of IPv6 addresses, Section 3 of specific threats. In the context of IPv6 addresses, Section 3 of
[RFC7721] provides further elaboration on the applicability of the [RFC7721] provides further elaboration on the applicability of the
privacy threats. privacy threats.
skipping to change at page 7, line 16 skipping to change at page 7, line 16
o Technologies should define a way to include sufficient bits of o Technologies should define a way to include sufficient bits of
entropy in the IPv6 interface identifier, based on the maximum entropy in the IPv6 interface identifier, based on the maximum
link lifetime. Specifying that randomized link-layer addresses link lifetime. Specifying that randomized link-layer addresses
can be used is one easy way to do so, for technologies that can be used is one easy way to do so, for technologies that
support such identifiers. support such identifiers.
o Specifications should not simply construct an IPv6 interface o Specifications should not simply construct an IPv6 interface
identifier by padding a short address with a set of other well- identifier by padding a short address with a set of other well-
known constant bits, unless the link lifetime is guaranteed to be known constant bits, unless the link lifetime is guaranteed to be
extremely short. This also applies to link-local addresses if the extremely short or the short address is allocated by the network
same short address is used independent of network and is unique (rather than being constant in the node). This also applies to
enough to allow location tracking. link-local addresses if the same short address is used independent
of network and is unique enough to allow location tracking.
o Specifications should make sure that an IPv6 address can change o Specifications should make sure that an IPv6 address can change
over long periods of time. For example, the interface identifier over long periods of time. For example, the interface identifier
might change each time a device connects to the network (if might change each time a device connects to the network (if
connections are short), or might change each day (if connections connections are short), or might change each day (if connections
can be long). This is necessary to mitigate correlation over can be long). This is necessary to mitigate correlation over
time. time.
o If a device can roam between networks, and more than a few bits of o If a device can roam between networks, and more than a few bits of
entropy exist in the IPv6 interface identifier, then make sure entropy exist in the IPv6 interface identifier, then make sure
skipping to change at page 7, line 41 skipping to change at page 7, line 42
5. IANA Considerations 5. IANA Considerations
This document has no actions for IANA. This document has no actions for IANA.
6. Security Considerations 6. Security Considerations
This entire document is about security considerations and how to This entire document is about security considerations and how to
specify possible mitigations. specify possible mitigations.
7. References 7. Informative References
7.1. Normative References
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119,
DOI 10.17487/RFC2119, March 1997,
<http://www.rfc-editor.org/info/rfc2119>.
7.2. Informative References
[RFC3972] Aura, T., "Cryptographically Generated Addresses (CGA)", [RFC3972] Aura, T., "Cryptographically Generated Addresses (CGA)",
RFC 3972, DOI 10.17487/RFC3972, March 2005, RFC 3972, DOI 10.17487/RFC3972, March 2005,
<http://www.rfc-editor.org/info/rfc3972>. <http://www.rfc-editor.org/info/rfc3972>.
[RFC4429] Moore, N., "Optimistic Duplicate Address Detection (DAD) [RFC4429] Moore, N., "Optimistic Duplicate Address Detection (DAD)
for IPv6", RFC 4429, DOI 10.17487/RFC4429, April 2006, for IPv6", RFC 4429, DOI 10.17487/RFC4429, April 2006,
<http://www.rfc-editor.org/info/rfc4429>. <http://www.rfc-editor.org/info/rfc4429>.
[RFC4941] Narten, T., Draves, R., and S. Krishnan, "Privacy [RFC4941] Narten, T., Draves, R., and S. Krishnan, "Privacy
skipping to change at page 9, line 31 skipping to change at page 9, line 21
Shelby, Z., and C. Gomez, "IPv6 over BLUETOOTH(R) Low Shelby, Z., and C. Gomez, "IPv6 over BLUETOOTH(R) Low
Energy", RFC 7668, DOI 10.17487/RFC7668, October 2015, Energy", RFC 7668, DOI 10.17487/RFC7668, October 2015,
<http://www.rfc-editor.org/info/rfc7668>. <http://www.rfc-editor.org/info/rfc7668>.
[RFC7721] Cooper, A., Gont, F., and D. Thaler, "Security and Privacy [RFC7721] Cooper, A., Gont, F., and D. Thaler, "Security and Privacy
Considerations for IPv6 Address Generation Mechanisms", Considerations for IPv6 Address Generation Mechanisms",
RFC 7721, DOI 10.17487/RFC7721, March 2016, RFC 7721, DOI 10.17487/RFC7721, March 2016,
<http://www.rfc-editor.org/info/rfc7721>. <http://www.rfc-editor.org/info/rfc7721>.
[I-D.ietf-6man-default-iids] [I-D.ietf-6man-default-iids]
Gont, F., Cooper, A., Thaler, D., and S. (Will), Gont, F., Cooper, A., Thaler, D., and S. LIU,
"Recommendation on Stable IPv6 Interface Identifiers", "Recommendation on Stable IPv6 Interface Identifiers",
draft-ietf-6man-default-iids-13 (work in progress), July draft-ietf-6man-default-iids-15 (work in progress), August
2016. 2016.
[I-D.ietf-6lo-6lobac] [I-D.ietf-6lo-6lobac]
Lynn, K., Martocci, J., Neilson, C., and S. Donaldson, Lynn, K., Martocci, J., Neilson, C., and S. Donaldson,
"Transmission of IPv6 over MS/TP Networks", draft-ietf- "Transmission of IPv6 over MS/TP Networks", draft-ietf-
6lo-6lobac-05 (work in progress), June 2016. 6lo-6lobac-05 (work in progress), June 2016.
[I-D.ietf-6lo-dect-ule] [I-D.ietf-6lo-dect-ule]
Mariager, P., Petersen, J., Shelby, Z., Logt, M., and D. Mariager, P., Petersen, J., Shelby, Z., Logt, M., and D.
Barthel, "Transmission of IPv6 Packets over DECT Ultra Low Barthel, "Transmission of IPv6 Packets over DECT Ultra Low
 End of changes. 8 change blocks. 
22 lines changed or deleted 12 lines changed or added

This html diff was produced by rfcdiff 1.45. The latest version is available from http://tools.ietf.org/tools/rfcdiff/