[governance] NSA sabotage of Internet security standards

[Norbert Bollow]

I support calls to international civil society to provide feedback to
the US government about their transborder human rights violations,
namely that those human rights violations are not acceptable, and I
think that IGC should also provide such feedback.

I do not support the idea that international civil society should
participate in US national processes or specification review and/or
standardization. Such participation, if it were to become significant,
would have the undesirable side-effect to strengthen the de facto
international role in Internet governance of those US national
processes.

Greetings,
Norbert


Suresh Ramasubramanian <suresh at hserus.net> wrote:

> Does there exist any note from them that they ask for feedback only
> from US citizens?
> 
> I have seen more than one suggestion here on this very forum that we
> (for a certain self defined value of we) send feedback to the USG on
> one thing or the other.
> 
> --srs (htc one x)
> 
> 
> 
> On 16 September 2013 4:33:37 PM Norbert Bollow <nb at bollow.ch> wrote:
> > Suresh Ramasubramanian <suresh at hserus.net> wrote:
> >
> > > Participate.
> > > 
> > http://bits.blogs.nytimes.com/2013/09/10/government-announces-steps-to-restore-confidence-on-encryption-standards/?_r=0
> >
> > That is a process of the US “*National* Institute of Standards and
> > Technology” (my emphasis).
> >
> > I would suggest that before it becomes appropriate to call
> > international civil society to participate in a review process for
> > crypto specs, a review process needs to be created that is credibly
> > committed to an international public interest objective!
> >
> > Greetings,
> > Norbert
> >
> >
> > > On 15-Sep-2013, at 10:56, parminder <parminder at itforchange.net>
> > > wrote:
> > > > On the Cryptography mailing list, John Gilmore (co-founder of
> > > > pioneering ISP The Little Garden and the Electronic Frontier
> > > > Foundation; early Sun employee; cypherpunk; significant
> > > > contributor to GNU/Linux and its crypto suite; and all-round
> > > > Internet superhero) describes his interactions with the NSA and
> > > > several obvious NSA stooges on the IPSEC standardization
> > > > working groups at the Internet Engineering Task Force. It's an
> > > > anatomy of how the NSA worked to undermine and sabotage
> > > > important security standards. For example, "NSA employees
> > > > explicitly lied to standards committees, such as that for
> > > > cellphone encryption, telling them that if they merely debated
> > > > an actually-secure protocol, they would be violating the export
> > > > control laws unless they excluded all foreigners from the room
> > > > (in an international standards committee!)." (emphasis added)
> > > > > http://boingboing.net/2013/09/08/firsthand-account-of-nsa-sabot.html
> > > > > What does it say for the US staying as a neutral, global
> > > > > interest
> > > > protecting, venue for global governance of the Internet!
> > > > > parminder >
> > > > > ____________________________________________________________
> > > > You received this message as a subscriber on the list:
> > > >     governance at lists.igcaucus.org
> > > > To be removed from the list, visit:
> > > >     http://www.igcaucus.org/unsubscribing
> > > > > For all other list information and functions, see:
> > > >     http://lists.igcaucus.org/info/governance
> > > > To edit your profile and to find the IGC's charter, see:
> > > >     http://www.igcaucus.org/
> > > > > Translate this email: http://translate.google.com/translate_t
> >
> >
> 
> 


-------------- next part --------------
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.igcaucus.org
To be removed from the list, visit:
     http://www.igcaucus.org/unsubscribing

For all other list information and functions, see:
     http://lists.igcaucus.org/info/governance
To edit your profile and to find the IGC's charter, see:
     http://www.igcaucus.org/

Translate this email: http://translate.google.com/translate_t