Indian ISPs: We already give govt full access to web traffic
1–10 of 113 posts
Re: Indian ISPs: We already give govt full access to web traffic
#2GNU Net [0] seems more relevant than ever:
"The Internet is broken."
"The conventional Internet is currently like a system of roads with deep potholes and highwaymen all over the place. Even if you still can use the roads (e.g. send emails, or browse websites) your vehicle might get hijacked, damaged, or long arms might reach into its back and steal your items (data) to use it against you and sell it to others - while you can't even notice the thievery nor accuse and hold the scroungers accountable. The Internet was not designed with security in mind: protecting against address forgery, routers learning metadata, or choosing trustworthy third parties is nontrivial and sometimes impossible."
Re: Indian ISPs: We already give govt full access to web traffic
#3An important point is whether legislation exists which allows such "monitoring".
Edit:
I would also like to add, one of the latest news was about malicious access of administrative data in Australia - which surely has in general more funds to invest in security than others. I would be concerned about personal data being copied in more repositories (multiplying chances of malicious access).
Re: Indian ISPs: We already give govt full access to web traffic
#4Don't all ISPs do this?
They can be stubborn and lose connecting with the rest of the net.
Re: Indian ISPs: We already give govt full access to web traffic
#5Many, if not most, nations have similar provisions to this. I think it's wrong and just over the top. However, encrypting everything and using multi-hop routing wherever possible at least will add noise to this sort of dragnet surveillance. Personally, I've taken steps to obsfucate my traffic since similar legislation was introduced in the UK.
Re: Indian ISPs: We already give govt full access to web traffic
#6But how... I mean presumably they don't install a root cert on every client device?
Re: Indian ISPs: We already give govt full access to web traffic
#7An important point is whether legislation exists which allows such "monitoring". Edit: I would also like to add, one of the latest news was about malicious access of administrative data in Australia - which surely has in general more funds to invest in security than others. I would be concerned about personal data being copied in more repositories (multiplying chances of malicious access).
Isn't that why countries passed non-specific laws? E.g. in the UK we have the Snoopers' Charter: https://en.wikipedia.org/wiki/Investigatory_Powers_Act_2016, I believe in the US the Patriot Act did something similar.
Re: Indian ISPs: We already give govt full access to web traffic
#8But how... I mean presumably they don't install a root cert on every client device?
They can intercept the unencrypted section of encrypted connections, such as TLS ServerName, and the source and destination of every IP datagram which already provides a lot of information to profile individual citizens.
QUIC moves to a model where everything except the Connection ID is encrypted[1], but it is also apparently being blocked in India[2]. The mandated transition to IPv6 in India[3] would also take away the need to track 5-tuples to identify individual customers, easing the scaling of monitoring.
[1] https://datatracker.ietf.org/doc/html/rfc8999
Re: Indian ISPs: We already give govt full access to web traffic
#9No post body was provided.
Re: Indian ISPs: We already give govt full access to web traffic
#10Yes they do, mainly because it’s the law.
That it’s a misguided law is open for debate, but I don’t believe there is any state in the world that doesn’t monitor and control tele-communications (internet is regulated as tele-communications WW).