zlacker

[parent] [thread] 2 comments
1. ranger+(OP)[view] [source] 2023-04-21 19:31:31
> backdooring

Name one attempt besides Dual_EC_DRBG. Also could you explain why that one took NIST 8 years to say "don't use it".

replies(1): >>LinuxB+KP
2. LinuxB+KP[view] [source] 2023-04-22 00:28:52
>>ranger+(OP)
There are already legal backdoors not actually referred to as that legally and they are used by corporations to meet their regulatory requirements for things like DLP. Google for example supports this. HTTPS doesn't even matter, their site supports DLP appliances logging in and intercepting all corporate interactions on the platform. The same capabilities exist for non corporate but that is used by law enforcement. This exists on all major platforms. This would play into E2EE if the servers create and manage the client E2EE keys which I believe is the case currently on all platforms that support E2EE. I am told that implementing client side libraries like OTR is too hard or too much friction. So what I am saying is that encryption need not be compromised when all corporations willingly create lawful intercept and DLP API's.

To get more information on this have your company reach out to each platform for DLP integrations.

replies(1): >>ranger+Bsj
◧◩
3. ranger+Bsj[view] [source] [discussion] 2023-04-27 19:52:48
>>LinuxB+KP
What does this have to do with anything?
[go to top]