From eca37f941bdf0d3a93de426e143076ea411ddb51 Mon Sep 17 00:00:00 2001
From: 3hhh <tripleh@hackingthe.net>
Date: Fri, 20 May 2022 18:14:30 +0200
Subject: [PATCH] set ipv6.ip6-privacy=2

In order to avoid leaking the MAC in IPv6.
---
 docs/privacy/anonymizing-your-mac-address.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/privacy/anonymizing-your-mac-address.md b/docs/privacy/anonymizing-your-mac-address.md
index 7b9a53c..6b8b60b 100644
--- a/docs/privacy/anonymizing-your-mac-address.md
+++ b/docs/privacy/anonymizing-your-mac-address.md
@@ -51,6 +51,8 @@ wifi.scan-rand-mac-address=yes
 wifi.cloned-mac-address=stable
 ethernet.cloned-mac-address=stable
 connection.stable-id=${CONNECTION}/${BOOT}
+#use random IPv6 addresses per session / don't leak MAC via IPv6 (cf. RFC 4941):
+ipv6.ip6-privacy=2
 ~~~
 
 * `stable` in combination with `${CONNECTION}/${BOOT}` generates a random address that persists until reboot.