3 ms·

>>It is easy to task authorities with intercept and decryption duties; actually doing it successfully is another matter entirely. Mathematics works both ways, f

>>It is easy to task authorities with intercept and decryption duties; actually doing it successfully is another matter entirely. Mathematics works both ways, friends. Actually if Apple, Goog, FB etc are forced to surrender the key--at the penalty of being excluded from 1.x billion people in India--math works only one way...

gruez 8y ago
they can't surrender keys they don't have (e2e). the only issue is that they may be forced to do a key change. one way around this would be to show a prominent notice if your peer changed keys, which would make it immediately obvious what was going on.
- j0hnM1st 8y ago
  > Actually if Apple, Goog, FB etc are forced to surrender the key--at the penalty of being excluded from 1.x billion people in India--math works only one way... They did that with Blackberry few years ago
- onetimemanytime 8y ago
  If India wants and if they can do it (maybe trade agreements prohibit them...not sure,) there's no way around. You want to do business in India? Yes? OK, then should have the key and must give it to India's police. Otherwise a ban on your business in India, $billion fines and arrests warrants for entire line of execs. Apple has great hopes for India https://www.msn.com/en-us/finance/companies/its-been-a-rout-apples-iphones-fall-flat-in-worlds-largest-untapped-market/ar-BBR7ZD7 https://www.msn.com/en-us/finance/companies/its-been-a-rout-...
- stanleydrew 8y ago
  The idea that showing a warning makes it immediately obvious what is going on is ridiculous. It would take a large-scale public education campaign to teach people what it means when they see a warning message that reads "Peer key changed. Are you sure you want to proceed?" If you need to be convinced, go ask your mom or dad whether it's immediately obvious what is going on when they see an insecure connection warning in their web browser. In my experience everyone just clicks through to "proceed anyway" without comprehending it at all.
  - saagarjha 8y ago
    That’s why most browsers now make this difficult to do.

gruez 8y ago

they can't surrender keys they don't have (e2e). the only issue is that they may be forced to do a key change. one way around this would be to show a prominent notice if your peer changed keys, which would make it immediately obvious what was going on.

j0hnM1st 8y ago
> Actually if Apple, Goog, FB etc are forced to surrender the key--at the penalty of being excluded from 1.x billion people in India--math works only one way... They did that with Blackberry few years ago
onetimemanytime 8y ago
If India wants and if they can do it (maybe trade agreements prohibit them...not sure,) there's no way around. You want to do business in India? Yes? OK, then should have the key and must give it to India's police. Otherwise a ban on your business in India, $billion fines and arrests warrants for entire line of execs. Apple has great hopes for India https://www.msn.com/en-us/finance/companies/its-been-a-rout-apples-iphones-fall-flat-in-worlds-largest-untapped-market/ar-BBR7ZD7 https://www.msn.com/en-us/finance/companies/its-been-a-rout-...
stanleydrew 8y ago
The idea that showing a warning makes it immediately obvious what is going on is ridiculous. It would take a large-scale public education campaign to teach people what it means when they see a warning message that reads "Peer key changed. Are you sure you want to proceed?" If you need to be convinced, go ask your mom or dad whether it's immediately obvious what is going on when they see an insecure connection warning in their web browser. In my experience everyone just clicks through to "proceed anyway" without comprehending it at all.
- saagarjha 8y ago
  That’s why most browsers now make this difficult to do.