71–80 of 167 posts
Maybe they don’t realize that e-commerce wouldn’t exist without trustworthy encryption. They’re taking about sabotaging trillions of dollars of economic transactions in lieu of just doing real police work to find the criminals.
Using non-perfect forward secrecy on TLS has done very little for making webshops safer.
oh god, please teach these people about encryption: what they're trying to do - it does not work like they think it works (as it seems to be). > Locking the door of your house (with near impossible to break locks) prevents us to find out what you're doing/keeping in your house, so we can't know whether you're doing/keeping something illegal in your house. So we are going to ban the making and using of unbreakable (or…
It seems like what they want is not so much breakable locks, but for you to have locks that can all be opened by a common master key. And they pinky swear that the master key will be kept totally safe and all the thousands of law enforcement officers they share it with will also keep it totally safe, and they will never ever use it except for intended purposes, and no bad guys will ever be able to get a copy of it.
Maybe they don’t realize that e-commerce wouldn’t exist without trustworthy encryption. They’re taking about sabotaging trillions of dollars of economic transactions in lieu of just doing real police work to find the criminals.
Also most of the e-commerce features don't really need encryption, but authenticity. That can be achieved with just asymmetric crypto and signing, but payloads can be in the open.
Encryption is only needed for privacy.
Earlier quoted context omitted.
Encryption is a very easy copy paste of programs and Is free, guns are a complex physical device that cost money and must be manufactured elsewhere and distributed to sellers. There's a significant level in effective ability to use them. But yes, it is similar. Distribution is so widespread that illigalization doesn't affect those who don't follow the law.
Encryption is actually incredibly hard. This is why it took whatsapp and other apps centrally doing it, and coordinating it between devices, to make end-to-end encryption commonly used.
Do you have any good learning resources on encryption? any Github repositories worth mirroring, with the actual implementations? I am a programmer with zero experience in that area but want to some day be able to "roll out my own crypto" if necessary :) EDIT: I'm not afraid of all the math I need to learn, just point me in the right direction.
Basically learn how to build crypto primitives, and how to break them. And eventually you'll get to those that so far no one managed to break.
The headline doesn’t seem to be backed by the content of the note they’re quoting. I do wish papers would reserve “war” for actual wars; while I would be appalled if this goes all the way through, a note saying “we want to have a chat and this is why” is slightly further from even a metaphorical war on encryption than Farage is from an actual war on Brussels.
> I do wish papers would reserve “war” for actual wars There are fewer of those than you likely realise. Countries that we'd think of having a dozen wars in the last century may only have declared one or even none. The Geneva Conventions for example smartly do not hinge on declarations of war, they rely upon the idea of "armed conflict" which is an observable fact.
Between drowning refugees and immigrants in Mediterranean sea, shooting them at the borders and throwing whoever survive in concentration camps, it's only logical to go after the local dissidents too.
Earlier quoted context omitted.
Encryption is a very easy copy paste of programs and Is free, guns are a complex physical device that cost money and must be manufactured elsewhere and distributed to sellers. There's a significant level in effective ability to use them. But yes, it is similar. Distribution is so widespread that illigalization doesn't affect those who don't follow the law.
Encryption is actually incredibly hard. This is why it took whatsapp and other apps centrally doing it, and coordinating it between devices, to make end-to-end encryption commonly used.
Also are they telling that companies like whatsapp will have to do it across the globe? What happens to chat between EU region and outside EU.
Let’s say they ban end to end encryption tomorrow in their save the children and puppies act. Guess who is still going to use it? The criminals are of course. You can’t ban math.
If you want to enable communication where both parties don't need to be online at the same time, and with easy setup of a trusted system, you will need something very much like the signal protocol.
That requires setting up a pretty complicated central service. Moreover, you are going to need to do quite some updating on the end-points of the e2e encrypted communications? Setting up this kind of operation, when illegal to do so, is hard. Moreover, it requires certain expertise that is not common among criminals.
How many criminals are going to be able to run this correctly? How many of these systems will get infiltrated by police, with a 'security update' being pushed that surreptitiously breaks the encryption?
Banning e2e encryption would do pretty good at moving almost everyone of off e2e encryption I think.