On 10/05/2016 09:09 PM, Dave Thaler wrote:
> The issue with IEEE MAC's is that it's sent to untrusted observers, not that
> it is a stable identifier per se.
> It just so happens that you typically don't have a choice but to send it in
> packets such that it can be observed
> by untrusted observers, hence the need to use randomized MACs.
The issue with MAC addresses is that they are constant across networks
when, if anything, they just need to be stable within the same subnet.
Besides, they have semantics (vendor ID) when in fact they need not.
And well, the problem is exacerbated by IPv6 SLAAC traditionally
generating IPv6 IIDs by embedding the underlying MAC address into them...
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492
perpass mailing list