Re: [HR-rt] [hrpc] Internet Architecture Board warns Australian encryption-busting laws could fragment the internet

 BarryWith a bit of digging into the announcement (with help from Google Translate), it sems that Denmark is making existing recommendations obligatory. The existing recommendations seem to be:
"What type should we use?

As mentioned in the section on rights and obligations above, it is always the data controller who, based on his risk assessment, must assess the level of security that is appropriate. Accordingly, according to the Data Inspectorate, there would be types of processing where encryption on the transport layer is appropriate and there will be types of treatment where - due to the high risk of the data subjects - the more secure end-to-end encryption will be appropriate. This could be the case, for example, if a data controller, such as an insurance company, has to send health information about a large number of registrants to a data broker for sending letters. In that case, on the basis of a risk assessment, the data controller may decide that end-to-end encryption will be an appropriate security measure. Due to ongoing collaboration with the data processor, the two parties have exchanged S / MIME certificates, so they can send e-mails back and forth to each other, which is end-to-end encrypted."
<https://www.datatilsynet.dk/emner/persondatasikkerhed/transmission-af-personoplysninger-via-e-mail/>

Mark P.

    On Sunday, November 4, 2018, 1:32:18 PM GMT+11, <bzs@theworld.com> wrote:  

And Denmark will require "email encryption" as of 1/1/2019 or in
European format 1/1/2019.

  https://litmus.com/blog/beyond-gdpr-denmark-makes-email-encryption-mandatory

This has all become a massive buzzword cargo cult with
legislators...they can manage to send/receive stuff on their phone so
surely they are expert in how it all works.

Apparently Denmark's legislation has chosen to omit the details of
what they mean by encryption of emails (end to end? transport? other?)

But the article linked below is your usual fantasy legislation.

Why not just make cancer illegal? Millions suffer and die from cancer
and it costs many billions to treat, we need a law!

On November 3, 2018 at 21:32 marknoumea=40yahoo.com@dmarc.ietf.org (Mark Perkins) wrote:
 > Not sure if people had seen this news
 > 
 > Internet Architecture Board warns Australian encryption-busting laws could
 > fragment the internet
 > 
 > https://www.zdnet.com/article/
 > internet-architecture-board-warns-australian-encryption-busting-laws-could-fragment-the-internet
 > /
 > 
 > Mark P.
 > _______________________________________________
 > hrpc mailing list
 > hrpc@irtf.org
 > https://www.irtf.org/mailman/listinfo/hrpc

-- 
        -Barry Shein

Software Tool & Die    | bzs@TheWorld.com            | http://www.TheWorld.com
Purveyors to the Trade | Voice: +1 617-STD-WRLD      | 800-THE-WRLD
The World: Since 1989  | A Public Information Utility | *oo*

_______________________________________________
hrpc mailing list
hrpc@irtf.org
https://www.irtf.org/mailman/listinfo/hrpc