Re: [arch-d] IAB Statement on Encryption and Mandatory Client-side Scanning of Content

[S Moonesamy <[e-mail]>]

Dear Internet Architecture Board,
At 11:45 AM 15-12-2023, IAB Executive Administrative Manager wrote:
>The Internet Architecture Board has posted a new IAB Statement on 
>Encryption and Mandatory Client-side Scanning of Content.

I was a bit surprised when I saw the statement about encryption and 
mandatory client-side scanning of content as I was not aware that it 
was a matter of interest to the Internet Architecture Board (IAB).

The statement starts with a paragraph about supporting human rights 
with respect to privacy and freedom of opinion.  The second paragraph 
quotes legislation being in the United Kingdom, the European Union 
and the United States as "policy proposals".  The term used is a bit 
odd.  Is the IAB providing input to the legislators in those countries?

There is a paragraph about government control into 
communication.  The paragraph ends with a statement about the IETF 
Community.  Did the IAB or any of its members seek the opinion of the 
IETF Community?  If so, I would appreciate a pointer to where the 
discussion happened.

I am at a loss on how mandatory use of client-side scanning could 
restrict the use of open-source software as the statement does not 
explain that.

I would like to commend the members of the IAB for acknowledging the 
concern about societal harms.  I do have some reservations about the 
rest of the sentence.  For example, the definition of "illegal 
content" varies across countries.

I could not find the document referenced as "[7]".  Could you please 
share the reference?

As a nit, the reference to RFC9490 points to an I-D.

Regards,
S. Moonesamy