[121956] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: SSL and Malicious Hardware/Software

daemon@ATHENA.MIT.EDU (Jack Lloyd)
Tue Apr 29 11:55:17 2008

Date: Tue, 29 Apr 2008 11:27:38 -0400
From: Jack Lloyd <lloyd@randombit.net>
To: Cryptography <cryptography@metzdowd.com>
Mail-Followup-To: Cryptography <cryptography@metzdowd.com>
In-Reply-To: <20080429020337.GC1317@np305c2n2.ms.com>

On Mon, Apr 28, 2008 at 10:03:38PM -0400, Victor Duchovni wrote:
> On Mon, Apr 28, 2008 at 03:12:31PM -0700, Ryan Phillips wrote:
> 
> > What are people's opinions on corporations using this tactic?  I can't
> > think of a great way of alerting the user, but I would expect a pretty
> > reasonable level of privacy while using an SSL connection at work.  
> 
> Expectations of privacy at work vary by jurisdiction and industry. In
> the US, and say in the financial services industry, any such expectations
> are groundless (IANAL).

Most places I have worked (all in the US) explicitly required consent
to more or less arbitrary amounts of monitoring as a condition of
employment.

-Jack

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post