4 ms·
In some countries, there are "secret laws" (not the USA), where government body that controls ISP license and legalese issues can force ISPs to keep logs, not j
by pavs 9y ago
In some countries, there are "secret laws" (not the USA), where government body that controls ISP license and legalese issues can force ISPs to keep logs, not just metadata, of individual user browsing and share it with law enforcement official - whenever asked without any form of a court order and legal paper. We already have to share the 'User Form' the users sign up when getting internet connections, which has all kinds of personal information including pictures, address, phone number and national ID number.
Failure to do so will get you heavily fined and get your license revoked to do business. Also, you can't talk about it to the public.
I have friends and family in at least three countries who are involved in this industry and have confirmed me that this is a routine process, log sharing, port-mirroring, putting black-boxes in the middle of your core network is just routine work and has been the case for many years.
- djsumdog 9y agoI was going to guess one of these countries is China, but they don't really have secret laws; they monitoring everything out with mandates that are out in the open.
- mafuy 9y agoThe parent was probably referring to laws pertaining to secrets, not laws that themselves are secret.
- koliber 9y agoI think that in such situations where a citizen of said country is not granting the operator the right to snoop, TLS 1.3 and it's inability to snoop accomplish the goal perfectly. Perhaps such countries will outlaw TLS 1.3. Who knows. The US did outlaw strong encryption at one point because it didn't allow it access to data it wanted to have access to.
- robin_reala 9y agoTo your second point, that’s not exactly what happened. 128-bit encryption wasn’t outlawed, it was just illegal to export (the more useless 40-bit encryption was fine). There were various ways of working around this export ban before 2000 when it was rescinded (for most countries). https://en.wikipedia.org/wiki/Export_of_cryptography_from_the_United_States#PC_era https://en.wikipedia.org/wiki/Export_of_cryptography_from_th...