Hello Björn!   
      
   Oct 04 11:14 2015, Björn Felten wrote to Markus Reschke:   
      
    MR>> An IP address can identify a person.   
      
    BF> Negatory! It can only identify an internet account.   
      
   Yes and no. By itself an IPv4 address would only identify the internet access.   
   But when you add those nifty tracking methods you can identify persons, also   
   hidden by NAT. But we're are talking about IPv6. No NAT, plenty of public IP   
   addresses. Add SLAAC and suddenly the interface part of the IPv6 address   
   identifies a device. The prefix doesn't matter at all. The only thing you   
   still need is a link between the device and the person(s). This is the reason   
   for PE (privacy extensions).   
      
    BF> Think about a public WiFi AP...   
      
   Think SLAAC! Public WiFi APs are a security nightmare anyway.   
      
   For starters please read https://en.wikipedia.org/wiki/IPv6_addr   
   ss#Stateless_address_autoconfiguration   
   and the section below about Modified EUI-64 to understand how an IPv6 address   
   is created via autoconfiguration.   
      
   Regards,   
   Markus   
      
   ---    
    * Origin: *** theca tabellaria *** (2:240/1661)