Re: ro-sec-00 & passive/privacy attacks (Was: Re: Template for raising issues w.r.t WG documents)

[entered as issue 2 in http://www.mip4.org/issues/tracker/mip6/issue]

Proposed text. In section 3 add a short paragraph before the last one:

"Nevertheless, an important class of passive attacks
remains, namely, attacks on privacy. It is well known that
by simply examining packets, eavesdroppers can track the movements of
individual nodes (and potentially, users) [RFC 3041].
Mobile IPv6 exacerbates the problem
by adding more potentially sensitive information into the packets
(e.g., Binding Updates, routing headers or home address options.
This document does not address these attacks."

-gabriel

> Changing the subject line to match the disussion
> better. Otherwise I agree with the issue and its
> proposed resolution. Thanks for raising this issue.
> 
> --Jari
> 
> Francis Dupont wrote:
> 
>> Description of issue : Passive attack against privacy
>> Submitter name: Francis Dupont
>> Submitter email address: Francis.Dupont <at> enst-bretagne.fr
>> Date first submitted: 2004/05/05
>> Reference:
>> Document: draft-ietf-mip6-ro-sec-00.txt
>> Comment type: E
>> Priority: 1
>> Section: 3
>> Rationale/Explanation of issue:
>>  Authors consider only active attackers when passive attackers can be
>>  a threat against privacy.
>> Length description of problem :
>>  The privacy issue is very important because of regulation bodies and
>>  is not limited to active attacks.
>>
>> Requested change:  Explicitely state that the privacy issue is not in 
>> the scope of the document.
>> Proposal: 
> 
> 
> 
> 
> _______________________________________________
> Mip6 mailing list
> Mip6 <at> ietf.org
> https://www.ietf.org/mailman/listinfo/mip6

--

-- 
Gabriel Montenegro (Sun Microsystems Laboratories, Europe)
180, Avenue de l'Europe          Email: gab <at> sun.com
ZIRST de Montbonnot              Mobile: +33 673 99 56 62
38334 Saint Ismier CEDEX, France
Office: +33 476 18 80 45 (sun internal: x38045)
Fax:    +33 476 18 88 88