IETF标准化进程中的隐私保护技术最新趋势
Recent Trends on Privacy-Preserving Technologies under Standardization at the IETF
AI总结：
本文综述了IETF正在标准化的IP层及以上的隐私保护技术，涵盖加密DNS、隐私通行证协议、通行密钥、私有中继与MASQUE，帮助相关人员了解隐私设计选项。
摘要：
终端用户担忧其在信息系统上操作时产生的敏感个人数据的隐私保护问题，这既涵盖他们为换取产品与服务而主动提供的数据（如个人身份信息），也包括相关元数据（例如对其位置信息的不必要访问）。此时部分隐私保护技术便派上用场，而互联网工程任务组（Internet Engineering Task Force，IETF）在将这类技术纳入基础架构层面发挥着核心作用。为此，本文对目前正处于IETF标准化阶段的第3层（即IP层）及以上层级的隐私保护机制进行了综述，其中包括归类于第5层的加密DNS技术，具体分为DNS-over-TLS（DoT）、DNS-over-HTTPS（DoH）和DNS-over-QUIC（DoQ），而QUIC这类底层技术属于第4层。随后，本文探讨了Privacy Pass Protocol（隐私通行证协议）及其在生成Private Access Tokens（私有访问令牌）中的应用，以及用于在应用层（即终端用户设备侧）替代密码进行身份验证的Passkeys（通行密钥）。最后，为在IP层面保护用户隐私，本文还讨论了Private Relays（私有中继）和MASQUE。本研究旨在让互联网的设计者、实现者与使用者了解与隐私相关的设计选择。
英文摘要：
End-users are concerned about protecting the privacy of their sensitive personal data that are generated while working on information systems. This extends to both the data they actively provide including personal identification in exchange for products and services as well as its related metadata such as unnecessary access to their location. This is when certain privacy-preserving technologies come into a place where Internet Engineering Task Force (IETF) plays a major role in incorporating such technologies at the fundamental level. Thus, this paper offers an overview of the privacy-preserving mechanisms for layer 3 (i.e. IP) and above that are currently under standardization at the IETF. This includes encrypted DNS at layer 5 classified as DNS-over-TLS (DoT), DNS-over-HTTPS (DoH), and DNS-over-QUIC (DoQ) where the underlying technologies like QUIC belong to layer 4. Followed by that, we discuss Privacy Pass Protocol and its application in generating Private Access Tokens and Passkeys to replace passwords for authentication at the application layer (i.e. end-user devices). Lastly, to protect user privacy at the IP level, Private Relays and MASQUE are discussed. This aims to make designers, implementers, and users of the Internet aware of privacy-related design choices.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
