[governance] NSA sabotage of Internet security standards

[Suresh Ramasubramanian]

As the ciphers in question are potentially used worldwide.. I would 
encourage anybody in the caucus who has specific skills in this area to 
submit their feedback

If at all necessary that a US based stakeholder should actually submit it 
to install, I am sure one can be found assuming the content of such 
feedback is drafted with technical knowledge and relevance rather than a 
political ax to grind.

--srs (htc one x)



On 16 September 2013 5:29:24 PM Norbert Bollow <nb at bollow.ch> wrote:
> I support calls to international civil society to provide feedback to
> the US government about their transborder human rights violations,
> namely that those human rights violations are not acceptable, and I
> think that IGC should also provide such feedback.
>
> I do not support the idea that international civil society should
> participate in US national processes or specification review and/or
> standardization. Such participation, if it were to become significant,
> would have the undesirable side-effect to strengthen the de facto
> international role in Internet governance of those US national
> processes.
>
> Greetings,
> Norbert
>
>
> Suresh Ramasubramanian <suresh at hserus.net> wrote:
>
> > Does there exist any note from them that they ask for feedback only
> > from US citizens?
> > I have seen more than one suggestion here on this very forum that we
> > (for a certain self defined value of we) send feedback to the USG on
> > one thing or the other.
> > --srs (htc one x)
> >
> > On 16 September 2013 4:33:37 PM Norbert Bollow <nb at bollow.ch> wrote:
> > > Suresh Ramasubramanian <suresh at hserus.net> wrote:
> > >
> > > > Participate.
> > > > > 
> http://bits.blogs.nytimes.com/2013/09/10/government-announces-steps-to-restore-confidence-on-encryption-standards/?_r=0
> > >
> > > That is a process of the US “*National* Institute of Standards and
> > > Technology” (my emphasis).
> > >
> > > I would suggest that before it becomes appropriate to call
> > > international civil society to participate in a review process for
> > > crypto specs, a review process needs to be created that is credibly
> > > committed to an international public interest objective!
> > >
> > > Greetings,
> > > Norbert
> > >
> > >
> > > > On 15-Sep-2013, at 10:56, parminder <parminder at itforchange.net>
> > > > wrote:
> > > > > On the Cryptography mailing list, John Gilmore (co-founder of
> > > > > pioneering ISP The Little Garden and the Electronic Frontier
> > > > > Foundation; early Sun employee; cypherpunk; significant
> > > > > contributor to GNU/Linux and its crypto suite; and all-round
> > > > > Internet superhero) describes his interactions with the NSA and
> > > > > several obvious NSA stooges on the IPSEC standardization
> > > > > working groups at the Internet Engineering Task Force. It's an
> > > > > anatomy of how the NSA worked to undermine and sabotage
> > > > > important security standards. For example, "NSA employees
> > > > > explicitly lied to standards committees, such as that for
> > > > > cellphone encryption, telling them that if they merely debated
> > > > > an actually-secure protocol, they would be violating the export
> > > > > control laws unless they excluded all foreigners from the room
> > > > > (in an international standards committee!)." (emphasis added)
> > > > > > http://boingboing.net/2013/09/08/firsthand-account-of-nsa-sabot.html
> > > > > > What does it say for the US staying as a neutral, global
> > > > > > interest
> > > > > protecting, venue for global governance of the Internet!
> > > > > > parminder >
> > > > > > ____________________________________________________________
> > > > > You received this message as a subscriber on the list:
> > > > >     governance at lists.igcaucus.org
> > > > > To be removed from the list, visit:
> > > > >     http://www.igcaucus.org/unsubscribing
> > > > > > For all other list information and functions, see:
> > > > >     http://lists.igcaucus.org/info/governance
> > > > > To edit your profile and to find the IGC's charter, see:
> > > > >     http://www.igcaucus.org/
> > > > > > Translate this email: http://translate.google.com/translate_t
> > >
> > >
> >
>



-------------- next part --------------
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.igcaucus.org
To be removed from the list, visit:
     http://www.igcaucus.org/unsubscribing

For all other list information and functions, see:
     http://lists.igcaucus.org/info/governance
To edit your profile and to find the IGC's charter, see:
     http://www.igcaucus.org/

Translate this email: http://translate.google.com/translate_t