From the latest GrapheneOS release notes (grapheneos.org/releases#2020.):
> disable RFC 7217 support (stable link-local IPv6 privacy addresses) and stick to link-local IP addresses based on the (random) MAC addresses
The Linux implementation of privacy extensions is some nasty stuff.
Conversation
You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more
For link-local addresses, the MAC address is available on the local network anyway and it needs to be properly randomized for privacy. Consider that solved already. Just need to figure out what to do for public addresses. Maybe conditionally disable it. Status quo is pretty bad.
1
You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more
You’re unable to view this Tweet because this account owner limits who can view their Tweets. Learn more
Users have the option to use persistent per-network MAC addresses, which is the default for AOSP / stock.
2
1
grapheneos.org/usage#wifi-pri is our documentation on this. Trying to make sure we actually live up to what we're supposed to be providing. Fixed a major known issue in this release but I hadn't realized that regular privacy addresses were causing a problem. Also, looking at how they..
1
1
... do all kinds of identifiers based on timers, etc. just makes me sad. Tempted to deal with the regular non-stable privacy address issue by just turning it off when full MAC randomization is enabled. It's messy though. See a lot of things that are wrong and it's overwhelming...
1
