{"id":312,"date":"2011-08-29T11:38:47","date_gmt":"2011-08-29T10:38:47","guid":{"rendered":"http:\/\/blogs.silicontechnix.com\/?p=312"},"modified":"2011-08-29T11:48:11","modified_gmt":"2011-08-29T10:48:11","slug":"why-pakistans-move-against-online-crypto-is-a-dangerous-idea","status":"publish","type":"post","link":"https:\/\/blogs.silicontechnix.com\/?p=312","title":{"rendered":"Why Pakistan&#8217;s move against online crypto is a dangerous idea"},"content":{"rendered":"<p>\n\tPakistan newspaper The Express Tribune reports from Karachi that the country&#39;s telecommunications regulator is pressing ISPs to comply with recent regulations which restrict the use of end-to-end encryption.<\/p>\n<p>\tAny technology which conceals communications and prohibits monitoring, it seems, is off the menu.<\/p>\n<p>\tThe Tribune quotes a letter sent to it by an ISP which had been warned by the regulator:<\/p>\n<p>\t&nbsp;&nbsp;&nbsp; <span style=\"color:#808080;\"><span style=\"font-family: lucida sans unicode,lucida grande,sans-serif;\">In line with [the Monitoring &amp; Reconciliation of International Telephone Traffic] Regulations 2010 and national security, [the Pakistan Telecommunication] Authority prohibited usage of all such mechanisms including encrypted virtual private networks (EVPNs) which conceal communication to the extent that prohibits monitoring.<\/span><\/span><\/p>\n<p>\tThe letter continues by reminding the ISP:<\/p>\n<p>\t&nbsp;&nbsp;&nbsp;<span style=\"font-family:lucida sans unicode,lucida grande,sans-serif;\"><span style=\"color: rgb(128, 128, 128);\"> It is observed that the aforementioned directive has not been followed in true letter and spirit as EVPNs are heavily being used on the Licensees Network.<\/span><\/span><\/p>\n<p>\tThis concern over the inability of law enforcement to intercept or prevent communication between criminals and militants will no doubt resonate in other countries &#8211; notably in the UK, where services such as BlackBerry&#39;s instant messaging came under the spotlight after the recent riots there.<\/p>\n<p>\tUnfortunately, however, an internet in which encryption was banned altogether would be even more dangerous than what we have today.<\/p>\n<p>\tYou&#39;ve probably heard the gun lobby&#39;s truism that &quot;if guns are outlawed, only outlaws will have guns.&quot; Yet there are many countries where private ownership of guns &#8211; handguns, at least &#8211; has been heavily regulated or even banned outright without a concomitant increase in gun crime.<\/p>\n<p>\tIt&#39;s tempting, therefore, to argue that if we can ban guns without endangering society, despite the vigorous warnings of a vocal minority, we can do the same with cryptography. Perhaps &quot;if crypto is outlawed, only outlaws will have crypto&quot; is just the crazy slogan of a bunch of libertarian survivalist cypherpunks with something to hide?<\/p>\n<p>\tThe problem is that banning every sort of &#39;communications concealing&#39; technology online would destroy the very fabric of the internet&#39;s law-abiding use. There would be no SSH, no SSL, no TLS, no HTTPS. There would be no WiFi security. Online commerce would implode.<\/p>\n<p>\tWhether the private ownership of weapons is as big a threat to society as some like to make out is an argument for another day, because cryptography on the internet isn&#39;t like handguns in the suburbs.<\/p>\n<p>\tIn most developed countries, you don&#39;t routinely need to pack a Browning Hi-Power when you visit your local bank branch. (Even in countries where that&#39;s legal, the bank would probably make you lock it in a safety deposit box at the entrance, anyway.)<\/p>\n<p>\tIn contrast, you do routinely need to use an SSL-protected tunnel to the bank when you transact online.<\/p>\n<p>\tSignificantly, the bank needs you to do so, as well. And if you don&#39;t, you&#39;re actually playing into the hands of the crooks.<\/p>\n<p>\tSo the next time you hear a nanny-state advocate oppose the general availability of strong crypto on the grounds that &quot;if you&#39;ve got nothing to hide, you don&#39;t need to hide anything&quot;, don&#39;t just sigh in dismay.<\/p>\n<p>\tConfront them with the inanity of their remark. (Unless they&#39;ve got a Browning Hi-Power. In that case, give a little smile and leave as soon as you can.)<\/p>\n<p>\t<strong>* If you have nothing to hide, then it doesn&#39;t matter whether you choose to hide it or not, does it?<\/p>\n<p>\t* Online, you do have things to hide. And if you and the rest of us don&#39;t hide it as a matter of course, the cybercrooks will plunder our economy more seriously than they&#39;re doing already.<\/strong><\/p>\n<p>\tIn short, if you want to do away with online crypto, you&#39;re making things easier for the crooks, not harder. And that, I&#39;m sorry to have to say, is a truism.<\/p>\n<p>\tTake cryptography seriously. Protecting your own online assets helps protect everyone else, too.<\/p>\n<p>\t<span style=\"font-size:10px;\"><span style=\"color: rgb(211, 211, 211);\">Sources:<br \/>\n\thttp:\/\/tribune.com.pk\/story\/240736\/virtual-watchdog-internet-users-banned-from-browsing-privately-for-security-reasons\/<br \/>\n\t<span style=\"font-size:9px;\">http:\/\/nakedsecurity.sophos.com\/2011\/08\/29\/pakistan-move-against-online-crypto-a-dangerous-idea\/?utm_source=facebook&amp;utm_medium=status%2Bmessage&amp;utm_campaign=naked%2Bsecurity<\/span><\/span><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Pakistan newspaper The Express Tribune reports from Karachi that the country&#39;s telecommunications regulator is pressing ISPs to comply with recent regulations which restrict the use of end-to-end encryption. Any technology which conceals communications and prohibits monitoring, it seems, is off the menu. The Tribune quotes a letter sent to it by an ISP which had [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_s2mail":"yes","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[140,17],"tags":[144,142,146,145,143,141],"class_list":["post-312","post","type-post","status-publish","format-standard","hentry","category-discussion","category-security","tag-crypto","tag-https","tag-pakistan","tag-pta","tag-ssl","tag-vpn"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p12j6H-52","_links":{"self":[{"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=\/wp\/v2\/posts\/312","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=312"}],"version-history":[{"count":5,"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=\/wp\/v2\/posts\/312\/revisions"}],"predecessor-version":[{"id":317,"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=\/wp\/v2\/posts\/312\/revisions\/317"}],"wp:attachment":[{"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=312"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=312"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.silicontechnix.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=312"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}