[Patient] DOJ first on encryption services

[Tony Rutkowski <[e-mail]>]

Hi Brian,

https://www.justice.gov/usao-sdca/pr/chief-executive-and-four-associates-indicted-conspiring-global-drug-trafficker

This action announced on Thursday by the US Attorney's office is a 
first.  It suggests the US Feds will be going after companies who cater 
to the wrong customers with encryption services.

It seems likely that most countries, providers, and enterprises will 
simply block or degrade TLS 1.3, QUIC, and other pervasive encryption 
protocols. However, there will always be outliers who will take the risk.

This DOJ action (and likely clones elsewhere in the world) adds some 
greater risk to the equation when the provider fails to undertake due 
diligence on the uses being undertaken by the customers running TLS 1.3 
and QUIC servers.  Where the customer is using the technology to evade 
law enforcement, including DCMA strictures, the provider may find 
themselves complicit through criminal or civil proceedings.

--tony

ps. They probably will not come after those developing the standards, 
but then the IESG probably has sufficient liability insurance courtesy 
of ISOC to handle litigation costs and fines.