Post AXcPd4TEubzfUAHiDI by ohmrun@mastodon.social
(DIR) More posts by ohmrun@mastodon.social
(DIR) Post #AXcHfGoxALs4jcykUa by penguin42@mastodon.org.uk
2023-07-12T11:18:58Z
0 likes, 0 repeats
@neil How would you argue against some form of key escrow?
(DIR) Post #AXcPd4TEubzfUAHiDI by ohmrun@mastodon.social
2023-07-12T12:48:14Z
0 likes, 0 repeats
@penguin42 @neil Two that spring to mind is that suddenly there's a big payoff to hack the central authority, and secondly there's a delivery problem for security fixes to endpoints.Never mind the insider market and exploits in the social realm.
(DIR) Post #AXcQxZcIv9UJpUrfyy by penguin42@mastodon.org.uk
2023-07-12T13:03:11Z
0 likes, 0 repeats
@neil @ohmrun It was a real question; if you're going to argue it's technically not doable, key escrow techniques seem a real technique that you'd have to argue against.
(DIR) Post #AXcSU3NdtcTtMP3gQK by penguin42@mastodon.org.uk
2023-07-12T13:20:13Z
0 likes, 0 repeats
@neil @ohmrun Matrix discussed it way back; I'm not sure how detailed their design got, but it might be worth checking with @matthew
(DIR) Post #AXcUM3sUMWW2Ukns0G by ohmrun@mastodon.social
2023-07-12T13:41:12Z
0 likes, 0 repeats
@penguin42 @neil @matthew What have you got to do to persuade people that a government backdoor to their phone is a bad idea?
(DIR) Post #AXcUrOwa5bHmo6f4dc by matrix@mastodon.matrix.org
2023-07-12T13:46:52Z
0 likes, 0 repeats
@penguin42 @neil @ohmrun @matthew we abandoned the idea very early on (~2015 or so); the only reason we mentioned it at all was because we were thinking about telcos who are already legally obligated to implement LI (lawful intercept - https://en.wikipedia.org/wiki/Lawful_interception). But given cryptographically safe LI is a contradiction in terms, we ditched it for the same reasons that we're campaigning against the OSB now.