4 ms·
really awesome that cutting edge crypto is being used by our elected officials & their aides to avoid public records laws!
by hendzen 10y ago
really awesome that cutting edge crypto is being used by our elected officials & their aides to avoid public records laws!
- Esau 10y agoWorse, they are using it while trying to place back doors in it.
- RangerScience 10y ago:D:
- tptacek 10y agoThinking about the last year's worth of stories, there's really no way for them to win here, is there?
- hendzen 10y agoSure... they should just use their (clearnet) government email addresses, secured with mandatory 2FA. If those get hacked it would be potentially embarrassing, but it would be less likely if they all had reasonable security measures. For any classified material officials can use their SIPRNET/JWICS emails, for which suspicious access is much more closely monitored, of course.
- tptacek 10y agoIt's worth remembering that the fundamental premise of that position is that the government might be able to field a better security team to protect the most sensitive email in the world than could Google. Not many security people in the world would sign on to that position.
- hendzen 10y agoThat's not really an issue. The government is perfectly free to use Google Apps for clearnet email. Do you mean to suggest that Gmail is more secure than government classified networks?
- tptacek 10y agoYes, that is exactly what I mean to suggest.
- hendzen 10y agoWhat gives you that impression?
- smileysteve 10y agoCompetition. Also simple things like spf and tls when many state and federal sites fail at it.
- ComputerGuru 10y agoEh. At some point, the threat isn't how good your crypto is but rather how much you're willing to sacrifice to keep it that way. Signal's authors may be more technically competent than a government security officer, but Signal can be coerced into releasing an update that surreptitiously changes the behavior of the application whereas well-protected NSA officers are (theoretically) more immune.
- tptacek 10y ago
- deleted 10y ago[deleted]
- hackuser 10y agoIf Hillary Clinton had used Signal instead of her private email server, would it have been ok? (No.)
- chrisabrams 10y agoWould we ever know?