Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IPv6 implementation does not comply to RFC 7217 and 7721 #5618

Closed
GoetzGoerisch opened this issue Mar 21, 2024 · 2 comments · Fixed by esphome/esphome-docs#3704
Closed

IPv6 implementation does not comply to RFC 7217 and 7721 #5618

GoetzGoerisch opened this issue Mar 21, 2024 · 2 comments · Fixed by esphome/esphome-docs#3704

Comments

@GoetzGoerisch
Copy link

GoetzGoerisch commented Mar 21, 2024

The problem

The newly integrate and now working IPv6 implemenation generates its IID based on the MAC of the device which is considered to bad from a Security and Privacy standpoint.

Which version of ESPHome has the issue?

2024.3.0

What type of installation are you using?

Home Assistant Add-on

Which version of Home Assistant has the issue?

2024.3.1

What platform are you using?

ESP8266

Board

esp01_1m

Component causing the issue

network

Example YAML snippet

esp8266:
  board: esp01_1m
  framework:
    version: recommended
    platform_version: 4.2.1


network:
    enable_ipv6: true

Anything in the logs that might be useful for us?

[wifi:416]:   IP Address: FE80::AAAA:BBFF:FECC:DDDD
[wifi:416]:   IP Address: 2001:DB8::AAAA:BBFF:FECC:DDDD
[wifi:416]:   IP Address: FD00::AAAA:BBFF:FECC:DDDD

Additional information

https://datatracker.ietf.org/doc/rfc7721/
https://datatracker.ietf.org/doc/rfc7217/

@HeMan
Copy link

HeMan commented Mar 21, 2024

LwIP, which is the IP-stack used here, doesn't have privacy extension, and there seem to be no recent discussion about it either. I found a question from 2022, https://lists.nongnu.org/archive/html/lwip-users/2022-08/msg00007.html, but nothing more.

@GoetzGoerisch
Copy link
Author

Then at least this deviation should be clearly documented as this might have consequences for the infrastructure and the users privacy.

Source is here, if I'm not mistaken?
network.rst

I would propose a PR is this is something you would merge?

nagyrobi added a commit to esphome/esphome-docs that referenced this issue Mar 21, 2024
* doc: describe the IPv6 address generation

* fixes esphome/issues#5618

* Update network.rst

---------

Co-authored-by: H. Árkosi Róbert <robreg@zsurob.hu>
@GoetzGoerisch GoetzGoerisch reopened this Mar 21, 2024
mrtoy-me pushed a commit to mrtoy-me/esphome-docs that referenced this issue Mar 25, 2024
* doc: describe the IPv6 address generation

* fixes esphome/issues#5618

* Update network.rst

---------

Co-authored-by: H. Árkosi Róbert <robreg@zsurob.hu>
magicbear pushed a commit to magicbear/esphome-docs that referenced this issue Mar 27, 2024
* doc: describe the IPv6 address generation

* fixes esphome/issues#5618

* Update network.rst

---------

Co-authored-by: H. Árkosi Róbert <robreg@zsurob.hu>
jesserockz pushed a commit to mrtoy-me/esphome-docs that referenced this issue Mar 28, 2024
* doc: describe the IPv6 address generation

* fixes esphome/issues#5618

* Update network.rst

---------

Co-authored-by: H. Árkosi Róbert <robreg@zsurob.hu>
@github-actions github-actions bot locked and limited conversation to collaborators Jul 20, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants