Re: [tor-talk] Danish data retention on steroids

[James Harrison <james@xxxxxxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 30/01/2016 04:36, Niels Elgaard Larsen wrote:
> True, but making it official also makes it easier to enforce and to
> make every service provider cooperate.
> 
> For Tor competent and systematically logging might worse that
> draconian measures by dictatorships.

To an extent - dictatorships can also competently and systematically log
.

The UK is in a very similar policy position, assuming the proposed
bill for investigatory powers goes forward (which it almost certainly
will); anyone who is an ISP can be compelled to do practically
anything. This includes tampering, interference, etc, with data or
equipment, owned by the ISP or not. Tor relay operators in the UK
could be legally compelled to provide access to government and gagged
from discussing it, for one worst-case scenario. This is much worse
than the Danish model, as far as I know.

The interesting questions, at least to me, are around how this changes
the threat model, and how capable Tor is at dealing with attacks that
take advantage of a well-equipped, legally mandated adversary
attempting to deanonymize users. While this isn't the stated goal of
such legislation, it could certainly be used in this manner.

- -- 
Cheers,
James Harrison
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
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=Inxw
-----END PGP SIGNATURE-----
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk