On Mo, 07.01.19 16:04, John Harris (johnmh(a)splentity.com) wrote:
On Monday, January 7, 2019 3:18:10 PM EST Lennart Poettering wrote:
> hence my recommendation to derive the any uuid for purposes like this
> from /etc/machine-id, by using a HMAC of some kind (see other mail).
I really don't think that this should be derived in any way from a machine id,
if it really is meant to be used for counting users, rather than tracking.
Please read up on what I wrote above, and what an HMAC does. Deriving
some identifier from the machine ID doesn't mean you leak the machine
ID, but it means resetting the machine ID will also reset that
identifier, which is a useful property in this case.
Lennart Poettering, Red Hat