Re: [AusNOG] Dutton decryption bill

2018-09-03 Thread Jim Woodward
Hi All, The problem with the ‘device malware’ approach is also that if such an approach is used where the intention is to target a single device and the software / hardware vendor screws up and deploys the ‘weakened’ application to many devices instead of one specific device then there is

Re: [AusNOG] Bigpond/Telstra mail server contact

2018-09-03 Thread Brad King
Brendan, Ill send you an email off list. Brad On Tue, 4 Sep. 2018, 10:00 Brendan Halley, wrote: > Hello, > > If anyone has a contact for Bigpond/Telstra mail server admins can you > please contact me off list? > > Brendan > ___ > AusNOG mailing list

Re: [AusNOG] Dutton decryption bill

2018-09-03 Thread Paul Wilkins
Paul, I can't agree. There appear to be specific protections under the bill that prevent weakening of security - viz: 317ZG & 317ZH. The internet has come to an important cross roads. It's no longer acceptable to expect that privacy considerations are sufficient to justify free reign for the

[AusNOG] Bigpond/Telstra mail server contact

2018-09-03 Thread Brendan Halley
Hello, If anyone has a contact for Bigpond/Telstra mail server admins can you please contact me off list? Brendan ___ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog

Re: [AusNOG] Dutton decryption bill

2018-09-03 Thread Alan Maher
Regardless of the ins and outs being discussed so far,  our "Dear Leaders" in the 5 eyes alliance were already meeting to discuss taking it further in the past week or two. This was a bit hidden as Australia took time out to roll yet another PM, which was likely convenient for some of the

Re: [AusNOG] Dutton decryption bill

2018-09-03 Thread Paul Wilkins
3 - Also in this ideal world, this one government agency issuing the warrant SSL certificates, and collecting warrant data, would have it's DNS DNSSEC signed ;) Kind regards Paul Wilkins On Mon, 3 Sep 2018 at 16:56, Paul Wilkins wrote: > Point taken that the point of insertion is inband as

Re: [AusNOG] Dutton decryption bill

2018-09-03 Thread Paul Wilkins
Point taken that the point of insertion is inband as opposed to existing procedures for wire taps. 1 - Having multiple agencies all requiring access (as the bill does) is going to create a multitude of possible targets (m x n) to act as vectors. This is clearly a vulnerability. An alternate