diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2021-05-24 09:17:14 -0400 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2021-05-24 09:24:28 -0400 |
| commit | ef33f88d803f0c5e04b101d153080ae04444b3dd (patch) | |
| tree | 867cd56561ac13b6b9b591a7ad2ad93984601b94 /static/usage.html | |
| parent | 16d1b072e08d309361fb968a5a882429d3ea4dc5 (diff) | |
document DHCP privacy improvement
Diffstat (limited to 'static/usage.html')
| -rw-r--r-- | static/usage.html | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/static/usage.html b/static/usage.html index 1d07ed7d..2de00f96 100644 --- a/static/usage.html +++ b/static/usage.html @@ -508,9 +508,6 @@ <section id="wifi-privacy-associated"> <h3><a href="#wifi-privacy-associated">Associated with an Access Point (AP)</a></h3> - <p>The DHCP client uses the anonymity profile rather than sending a hostname so it - doesn't compromise the privacy offered by MAC randomization.</p> - <p>Associated MAC randomization is performed by default. This can be controlled per-network with Settings ➔ Network & Internet ➔ Wi-Fi ➔ <network> ➔ Advanced ➔ Privacy.</p> @@ -521,6 +518,12 @@ connecting to a network. It has 3 options available: "Use fully randomized MAC (default)", "Use per-network randomized MAC" and "Use device MAC".</p> + <p>The DHCP client uses the anonymity profile rather than sending a hostname + so it doesn't compromise the privacy offered by MAC randomization. When the + per-connection MAC randomization added by GrapheneOS is being used, DHCP + client state is flushed before reconnecting to a network to avoid revealing + that it's likely the same device as before.</p> + <p>GrapheneOS also disables support for stable link-local IPv6 addresses, since these have the potential to be used as identifiers. It's more sensible to use typical link-local address generation based on the (randomized) MAC address since link-local |