4 ms·

Not over licensed RF links in most countries, unless you publish the private key.

himinlomax 6y ago
Publishing the private key only allows for spoofing, not decrypting, unless you fail to use ephemeral Diffie-Hellman, which seems to be the default for most clients nowadays.
- lima 6y ago
  Yep, TLS with forward secrecy is not legal to use on ham RF links. Same with SSH.
  - ampdepolymerase 6y ago
    Let's hope no IoT company is stupid enough to send customer data over this. Stuff like LoRa is very popular these days, but they are low bandwidth. Would not be surprising if a company decides that MVNO providers are too expensive and rolls their own communications infrastructure.
    - jcrawfordor 6y ago
      With few exceptions, all commercial use of amateur bands is prohibited, and licensing is by operator rather than by device. So for an IoT provider to run into this issue they'd have to have much larger problems on their hands as well.
    - jasonjayr 6y ago
      Not a HAM, nor any expert by any means, but IIRC, LoRa + the Wifi Bands (2.4ghz/5.0ghz) permit encryption. It's only the HAM bands that forbid encryption.
sfmike 6y ago
nothing can be encrypted on amprnet?
- rcoveson 6y ago
  It's a law governing the ham radio bands' usage in general. No encrypted/obscured communications. In fact, you have to regularly, unambiguously, and publicly identify yourself every ten minutes if I recall.
  - metalliqaz 6y ago
    why?
    - rcoveson 6y ago
      Well, you're using an extremely limited global resource. Blasting your voice around the world with 1,500 watts behind it is something that not everybody can do at once. So we need some sort of internationally agreeable rule set. The compromises include no encryption, required licensing, individual identification, no political speech, and others. But what we get in return is pretty cool: I can talk to somebody in Japan in a truly peer-to-peer fashion, using nothing but our own hardware in our own homes and the natural electromagnetic properties of the atmosphere. If encryption were allowed on the ham bands, they would probably become dominated by general purpose digital communications; likely to the exclusion of their current purpose.
      - metalliqaz 6y ago
        I'm not making the connection. If encoded data is allowed (unencrypted), why isn't it already dominated by general purpose digital comms?
        rcoveson 6y ago
        Your conversations aren't just not encrypted, they're totally public. That's unacceptable for most communications. Take everything you do on a phone call, over SMS, and over the Internet. Subtract anything personal, anything business related, anything involving copyright (e.g. watching a movie or listening to a song, even if you own it), and anything you don't want associated with your identity (anonymous blogging). Also, I forgot to mention that broadcasting is also disallowed. You couldn't just start telling poetry on a frequency without regard to anybody who may or may not be listening. You also can't use the bands for any commercial purpose. Anyway, after subtracting all that, what your left with is what people use the band for today. Which, I suppose, could still be considered "general purpose." But when I said "general purpose digital communications," what I had in mind were the sorts of things you use email or the web for. By volume, mostly music, videos, porn, ads, and private business operations.

Publishing the private key only allows for spoofing, not decrypting, unless you fail to use ephemeral Diffie-Hellman, which seems to be the default for most clients nowadays.

lima 6y ago
Yep, TLS with forward secrecy is not legal to use on ham RF links. Same with SSH.
- ampdepolymerase 6y ago
  Let's hope no IoT company is stupid enough to send customer data over this. Stuff like LoRa is very popular these days, but they are low bandwidth. Would not be surprising if a company decides that MVNO providers are too expensive and rolls their own communications infrastructure.
  - jcrawfordor 6y ago
    With few exceptions, all commercial use of amateur bands is prohibited, and licensing is by operator rather than by device. So for an IoT provider to run into this issue they'd have to have much larger problems on their hands as well.
  - jasonjayr 6y ago
    Not a HAM, nor any expert by any means, but IIRC, LoRa + the Wifi Bands (2.4ghz/5.0ghz) permit encryption. It's only the HAM bands that forbid encryption.

sfmike 6y ago

nothing can be encrypted on amprnet?

rcoveson 6y ago
It's a law governing the ham radio bands' usage in general. No encrypted/obscured communications. In fact, you have to regularly, unambiguously, and publicly identify yourself every ten minutes if I recall.
- metalliqaz 6y ago
  why?
  - rcoveson 6y ago
    Well, you're using an extremely limited global resource. Blasting your voice around the world with 1,500 watts behind it is something that not everybody can do at once. So we need some sort of internationally agreeable rule set. The compromises include no encryption, required licensing, individual identification, no political speech, and others. But what we get in return is pretty cool: I can talk to somebody in Japan in a truly peer-to-peer fashion, using nothing but our own hardware in our own homes and the natural electromagnetic properties of the atmosphere. If encryption were allowed on the ham bands, they would probably become dominated by general purpose digital communications; likely to the exclusion of their current purpose.
    - metalliqaz 6y ago
      I'm not making the connection. If encoded data is allowed (unencrypted), why isn't it already dominated by general purpose digital comms?
      - rcoveson 6y ago
        Your conversations aren't just not encrypted, they're totally public. That's unacceptable for most communications. Take everything you do on a phone call, over SMS, and over the Internet. Subtract anything personal, anything business related, anything involving copyright (e.g. watching a movie or listening to a song, even if you own it), and anything you don't want associated with your identity (anonymous blogging). Also, I forgot to mention that broadcasting is also disallowed. You couldn't just start telling poetry on a frequency without regard to anybody who may or may not be listening. You also can't use the bands for any commercial purpose. Anyway, after subtracting all that, what your left with is what people use the band for today. Which, I suppose, could still be considered "general purpose." But when I said "general purpose digital communications," what I had in mind were the sorts of things you use email or the web for. By volume, mostly music, videos, porn, ads, and private business operations.