[163368] in North American Network Operators' Group
Re: PRISM: NSA/FBI Internet data mining project
daemon@ATHENA.MIT.EDU (Mark Seiden)
Thu Jun 6 23:38:35 2013
From: Mark Seiden <mis@seiden.com>
In-Reply-To: <B690AC58-CBC6-4616-813A-F647972E4318@ufp.org>
Date: Thu, 6 Jun 2013 20:38:04 -0700
To: Leo Bicknell <bicknell@ufp.org>
Cc: goemon@anime.net, NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Jun 6, 2013, at 6:28 PM, Leo Bicknell <bicknell@ufp.org> wrote:
>=20
> On Jun 6, 2013, at 8:06 PM, jim deleskie <deleskie@gmail.com> wrote:
>=20
>> Knowing its going on, knowing nothing online is secret !=3D OK with =
it, it
>> mealy understand the way things are.
>=20
> While there's a whole political aspect of electing people who pass =
better laws, NANOG is not a political action forum.
>=20
> However many of the people on NANOG are in positions to affect =
positive change at their respective employers.
>=20
> - Implement HTTPS for all services.
not just externally exposed services --=20
or use some form of strong crypto on your inter-data center traffic.
> - Implement PGP for e-mail.
> - Implement S/MIME for e-mail.
> - Build cloud services that encrypt on the client machine, using a key =
that is only kept on the client machine.
> - Create better UI frameworks for managing keys and identities.
> - Align data retention policies with the law.
> - Scrutinize and reject defective government legal requests.
> - When allowed by law, charge law enforcement for access to data.
> - Lobby for more sane laws applied to your area of business.
>=20
> The high tech industry has often made the government's job easy, not =
by intention but by laziness. Keeping your customer's data secure =
should be a proud marketing point.
>=20
> --=20
> Leo Bicknell - bicknell@ufp.org - CCIE 3440
> PGP keys at http://www.ufp.org/~bicknell/
>=20
>=20
>=20
>=20
>=20
