Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Feds put heat on Web firms for master encryption keys
CNet ^ | 24 July, 2013 | Declan McCullagh

Posted on 07/25/2013 9:55:36 PM PDT by Errant

The U.S. government has attempted to obtain the master encryption keys that Internet companies use to shield millions of users' private Web communications from eavesdropping.

These demands for master encryption keys, which have not been disclosed previously, represent a technological escalation in the clandestine methods that the FBI and the National Security Agency employ when conducting electronic surveillance against Internet users.

If the government obtains a company's master encryption key, agents could decrypt the contents of communications intercepted through a wiretap or by invoking the potent surveillance authorities of the Foreign Intelligence Surveillance Act. Web encryption -- which often appears in a browser with a HTTPS lock icon when enabled -- uses a technique called SSL, or Secure Sockets Layer.

"The government is definitely demanding SSL keys from providers," said one person who has responded to government attempts to obtain encryption keys. The source spoke with CNET on condition of anonymity.

The person said that large Internet companies have resisted the requests on the grounds that they go beyond what the law permits, but voiced concern that smaller companies without well-staffed legal departments might be less willing to put up a fight. "I believe the government is beating up on the little guys," the person said. "The government's view is that anything we can think of, we can compel you to do."

(Excerpt) Read more at news.cnet.com ...


TOPICS: Constitution/Conservatism; Crime/Corruption; Extended News; Government
KEYWORDS: fbi; fedpasswords; nsa; passwords; ssl; www
Navigation: use the links below to view more comments.
first 1-2021-4041-46 next last
Moderators, Please note that this article pertains to government attempts to acquire SSL Keys, and not the previously posted attempt by the government to acquire user passwords.

It just doesn't stop...

1 posted on 07/25/2013 9:55:36 PM PDT by Errant
[ Post Reply | Private Reply | View Replies]

To: Errant

How about that privacy policy they post?


2 posted on 07/25/2013 10:01:28 PM PDT by sickoflibs (To GOP : Any path to US Citizenship IS putting them ahead in line. Stop lying about your position.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: sickoflibs

Why would anyone read that?
I gotta get on Facebook stat!


3 posted on 07/25/2013 10:03:37 PM PDT by mylife (Ted Cruz understands the law, and he does not fear the unlawful.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Errant

We are going into full electronic lockdown mode in prison America. Every electronic communication has all the security and privacy of those indestructable stainless steel phones they put in drunk tanks so you can arrange bail.


4 posted on 07/25/2013 10:05:34 PM PDT by SpaceBar
[ Post Reply | Private Reply | To 1 | View Replies]

To: Errant

This is now getting scary. Way out of control.


5 posted on 07/25/2013 10:07:38 PM PDT by gunsequalfreedom (Conservative is not a label of convenience. It is a guide to your actions.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: SpaceBar

I wouldn’t know about those drunk tank phones. Care to share a few details LOL


6 posted on 07/25/2013 10:09:21 PM PDT by gunsequalfreedom (Conservative is not a label of convenience. It is a guide to your actions.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: SpaceBar

And that is just the way it is.
If you are on the radar you can assume they are watching.
It has always been that way.

But, it is ridiculous to assume that the ABC agencies can monitor all of us all of the time but they cannot monitor Snowden.
That the ABC agencies are listening to you talk to Aunt Mabel, but that they cannot suss the Boston bastards even when the Russians gave them a heads up years earlier.

Something stinks here, and it stinks real bad.


7 posted on 07/25/2013 10:12:08 PM PDT by mylife (Ted Cruz understands the law, and he does not fear the unlawful.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: gunsequalfreedom

Yep, this is all of your online banking, purchases, and etc.


8 posted on 07/25/2013 10:17:30 PM PDT by Errant
[ Post Reply | Private Reply | To 5 | View Replies]

To: Errant

PFS is your friend.
http://en.wikipedia.org/wiki/Perfect_forward_secrecy


9 posted on 07/25/2013 10:23:33 PM PDT by Bobalu (It is not obama we are fighting, it is the media.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mylife

I treat the internet like it is a fail safe vault like Fort Knox.

I download a new flash-player every-time I get a popup warning me I need to click its button to keep my computer from crashing.

Especially when they require my SS #, phone full name and address. I cant lose.


10 posted on 07/25/2013 10:23:44 PM PDT by sickoflibs (To GOP : Any path to US Citizenship IS putting them ahead in line. Stop lying about your position.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Bobalu
From the article:

Even PFS isn't complete proof against surveillance. It's possible to mount a more advanced attack, sometimes called a man-in-the-middle or active attack, and decode the contents of the communications.

A Wired article in 2010 disclosed that a company called Packet Forensics was marketing to government agencies a box that would do precisely that. (There is no evidence that the NSA performs active attacks as part of routine surveillance, and even those could be detected in some circumstances.)

The Packet Forensics brochure said that government agencies would "have the ability to import a copy of any legitimate key they obtain (potentially by court order)." It predicted that agents or analysts will collect their "best evidence while users are lulled into a false sense of security afforded by Web, e-mail or VOIP encryption."

11 posted on 07/25/2013 10:28:06 PM PDT by Errant
[ Post Reply | Private Reply | To 9 | View Replies]

To: Errant
This is a good solution rather than scrubbing your drive once a week. And it's FREE! Image Hosted by ImageShack.us
Image Hosted by ImageShack.us
It does make your deleted files and folders unrecoverable. Tested by the best - NON RECOVERABLE!
12 posted on 07/25/2013 10:31:56 PM PDT by Chance Hart
[ Post Reply | Private Reply | To 1 | View Replies]

To: Errant

It’s apparent that more work needs to be done to create better privacy solutions on the net.

At least PFS would make their work much harder and limit the number of targets they could handle...it just needs to be ubiquitous.


13 posted on 07/25/2013 10:33:34 PM PDT by Bobalu (It is not obama we are fighting, it is the media.)
[ Post Reply | Private Reply | To 11 | View Replies]

To: Chance Hart

I wonder WHY it’s free? Is this one the NSA funded? ;)


14 posted on 07/25/2013 10:35:37 PM PDT by Errant
[ Post Reply | Private Reply | To 12 | View Replies]

To: Bobalu

I agree. Besides, sounds like they’re getting desperate to learn what we’re up to. ;)


15 posted on 07/25/2013 10:39:49 PM PDT by Errant
[ Post Reply | Private Reply | To 13 | View Replies]

To: Errant

Problem is, if you unplug that will probably find them knocking at your door.


16 posted on 07/25/2013 10:55:16 PM PDT by gunsequalfreedom (Conservative is not a label of convenience. It is a guide to your actions.)
[ Post Reply | Private Reply | To 8 | View Replies]

To: Errant

Here is something to consider...does your computer have a camera? Is big brother watching you right now.


17 posted on 07/25/2013 10:57:06 PM PDT by gunsequalfreedom (Conservative is not a label of convenience. It is a guide to your actions.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: gunsequalfreedom

I purposely bought a laptop in 2009 without the camera


18 posted on 07/25/2013 10:58:42 PM PDT by GeronL
[ Post Reply | Private Reply | To 17 | View Replies]

To: GeronL

Although it has kept me from making videos with action figures as the stars and posting them to Youtube, so who knows what kind of art I have denied the world.


19 posted on 07/25/2013 11:01:46 PM PDT by GeronL
[ Post Reply | Private Reply | To 18 | View Replies]

To: Errant

There is an upgraded one, but the features of the File Shredder are the same. Not NSA funded - been around for years and they upgrade regularly. I used to recover deleted data regularly. When I tried to recover after a Wipe Clean< couldn’t get any shred of a file or folder, and that was years ago. Much improved I would imagine from that time to keep up with tech. Anyway, I feel more comfortable using it although I have nothing to hide. Just a personal thing to me kinda like a burglar going through your personal stuff. Just one small thing in my life I don’t have to think about. Makes me happy Errant and that is Numero Uno on my daily to do list. :-)


20 posted on 07/25/2013 11:07:35 PM PDT by Chance Hart
[ Post Reply | Private Reply | To 14 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-46 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson