macos Sierra with CGA address?

[Holger Zuleger]

Hi,

I just realized that the permanent interface identifier of my MAC has
changed after upgrading to OS 10.12 (I guess).

The output of ifconfig shows a new "secured" flag at the permanent address.
$ ifconfig en0 | grep inet6 | \
>       sed "s/2[^:]*:[^:]*:[^:]*:[^:]*:/<prfx48>:/"
inet6 fe80::c54:6333:ac12:c67b%en0 prefixlen 64 secured scopeid 0x4
inet6 <prfx48>:20e3:84f6:6794:5ace prefixlen 64 autoconf secured
inet6 <prfx48>:8822:a8a3:b6ec:a79b prefixlen 64 autoconf temporary

I found two or three posts in the internet, all mentioning (or hoping)
that this is related to a change to RFC7217 as default IID mechanism.

But one guy sad, that the source code (of 10.11) shows, that this is a
cryptographic generated interface identifier for SeND (RFC3971).

I tend to believe that the latter is true.
Has anyone more information about this? Especially how to configure it?

Best Regards
 Holger

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4160 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.cluenet.de/pipermail/ipv6-ops/attachments/20161214/452ddb8b/attachment.bin