[perpass] India withdraws encryption policy - Re: India posed to require cleartext, cleartext retention, cipher and backdoor mandates

Dan York <york@isoc.org> Tue, 22 September 2015 09:57 UTC

Return-Path: <york@isoc.org>
X-Original-To: perpass@ietfa.amsl.com
Delivered-To: perpass@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF71B1A1B2E for <perpass@ietfa.amsl.com>; Tue, 22 Sep 2015 02:57:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kGhEIaHOe6pW for <perpass@ietfa.amsl.com>; Tue, 22 Sep 2015 02:57:33 -0700 (PDT)
Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0082.outbound.protection.outlook.com [65.55.169.82]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AFDF1A1A8B for <perpass@ietf.org>; Tue, 22 Sep 2015 02:57:33 -0700 (PDT)
Received: from CY1PR0601MB1657.namprd06.prod.outlook.com (10.163.232.19) by CY1PR0601MB1660.namprd06.prod.outlook.com (10.163.232.22) with Microsoft SMTP Server (TLS) id 15.1.274.16; Tue, 22 Sep 2015 09:57:30 +0000
Received: from CY1PR0601MB1657.namprd06.prod.outlook.com ([10.163.232.19]) by CY1PR0601MB1657.namprd06.prod.outlook.com ([10.163.232.19]) with mapi id 15.01.0274.009; Tue, 22 Sep 2015 09:57:30 +0000
From: Dan York <york@isoc.org>
To: Stephen Farrell <stephen.farrell@cs.tcd.ie>
Thread-Topic: India withdraws encryption policy - Re: [perpass] India posed to require cleartext, cleartext retention, cipher and backdoor mandates
Thread-Index: AQHQ9IzuEja2wYydg0a5INRrh1L0V55HNuuAgAEaJ4A=
Date: Tue, 22 Sep 2015 09:57:28 +0000
Message-ID: <F13C24AF-2A4F-426C-8600-AEC4CF4979E1@isoc.org>
References: <CABtrr-XSAmHEjKvHL_fThqmeWwiCNvz=8-TWhJOd5g895B+bNw@mail.gmail.com> <56003957.9020308@cs.tcd.ie>
In-Reply-To: <56003957.9020308@cs.tcd.ie>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=york@isoc.org;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [74.69.229.215]
x-microsoft-exchange-diagnostics: 1; CY1PR0601MB1660; 5:1Csi5oNdqT1PdOFaEGDx3mQZe/qvJuG28oqVf3Mlndi4+Ed1ft1HzuGguhgWwTnDFpCyUq5LjrwKWCRERmrOQ5i3TqiKwK7Mrm/Iqbw7utvJ6FJa8nmcqxfUEfFJSYcx5lNpP+cqzaNJXdaHacQzMw==; 24:7P7V53m3hiDeK1ZuoMTODr6Ec1fSR0DHt2ZKCKGFwZtelw4EaJ6QkwdNhoqOnOFgvIxA0v2gMJ3/3HvciaGe3KWYx6i+N8TeYRzjbZhkODg=; 20:D16dR4/bYbUfyALiZRX6y/OHGiYxBpGUmWb2TnLmFZzWVkMWBQRZVww0zuR2MrC/sn+M4Jve8u3s0PhdrPYTDw==
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR0601MB1660;
x-microsoft-antispam-prvs: <CY1PR0601MB1660A4D38A89F20E1387447BB7450@CY1PR0601MB1660.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(520078)(3002001); SRVR:CY1PR0601MB1660; BCL:0; PCL:0; RULEID:; SRVR:CY1PR0601MB1660;
x-forefront-prvs: 0707248B64
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(189002)(377454003)(479174004)(24454002)(199003)(5001960100002)(2950100001)(77096005)(77156002)(561944003)(5001830100001)(64706001)(66066001)(2900100001)(86362001)(82746002)(5002640100001)(68736005)(92566002)(105586002)(81156007)(102836002)(62966003)(110136002)(229853001)(4001540100001)(101416001)(46102003)(5001860100001)(106356001)(99286002)(10400500002)(19580395003)(5004730100002)(122556002)(19580405001)(16236675004)(15395725005)(33656002)(11100500001)(87936001)(19617315012)(50986999)(83716003)(54356999)(76176999)(97736004)(189998001)(15975445007)(36756003)(40100003)(5007970100001)(106116001)(104396002); DIR:OUT; SFP:1101; SCL:1; SRVR:CY1PR0601MB1660; H:CY1PR0601MB1657.namprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
received-spf: None (protection.outlook.com: isoc.org does not designate permitted sender hosts)
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative; boundary="_000_F13C24AF2A4F426C8600AEC4CF4979E1isocorg_"
MIME-Version: 1.0
X-OriginatorOrg: isoc.org
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Sep 2015 09:57:28.7484 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 89f84dfb-7285-4810-bc4d-8b9b5794554f
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR0601MB1660
Archived-At: <http://mailarchive.ietf.org/arch/msg/perpass/6ci4Fj3ubdKUjB1WfPRsORhQQlQ>
Cc: perpass <perpass@ietf.org>, Joseph Lorenzo Hall <joe@cdt.org>
Subject: [perpass] India withdraws encryption policy - Re: India posed to require cleartext, cleartext retention, cipher and backdoor mandates
X-BeenThere: perpass@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "The perpass list is for IETF discussion of pervasive monitoring. " <perpass.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perpass>, <mailto:perpass-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perpass/>
List-Post: <mailto:perpass@ietf.org>
List-Help: <mailto:perpass-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perpass>, <mailto:perpass-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Sep 2015 09:57:36 -0000

There was a significant amount of public outcry yesterday within India and the latest news is that the government of India is apparently withdrawing the draft policy:

http://timesofindia.indiatimes.com/tech/tech-news/Government-withdraws-draft-of-encryption-policy/articleshow/49057232.cms

Prior to that the government agency involved had already issued an update saying that the draft policy would NOT apply to TLS in web commerce and social media, messaging, etc.  The update document seems to have been removed, but is captured here by a news site:

http://www.medianama.com/2015/09/223-india-draft-encryption-policy/

Dan

On Sep 21, 2015, at 1:07 PM, Stephen Farrell <stephen.farrell@cs.tcd.ie<mailto:stephen.farrell@cs.tcd.ie>> wrote:


Sheesh, there is so much wrong in that document. And they
top it off by recommending RC4.

Does anyone know if this is a policy that is likely to be
enforced or one that'd be more honoured in the breach?

S.

On 21/09/15 17:45, Joseph Lorenzo Hall wrote:
Obviously, of relevance to those that will be at the IAB MARNEW
workshop this week (although this isn't in any way specific to radio
networks).

* Everyone (all individuals and businesses) using encryption must
store unencrypted content for 90 days
* Government will dictate algorithms and key sizes
* Possibility of a legally mandated backdoor

Article from Daily Dot:
http://www.dailydot.com/politics/india-encryption-backdoors-draft-policy/

Text of the proposal (comments due 16 Oct.):
https://info.publicintelligence.net/IN-DraftEncryptionPolicy.pdf



_______________________________________________
perpass mailing list
perpass@ietf.org<mailto:perpass@ietf.org>
https://www.ietf.org/mailman/listinfo/perpass

--
Dan York
Senior Content Strategist, Internet Society
york@isoc.org<mailto:york@isoc.org>   +1-802-735-1624
Jabber: york@jabber.isoc.org<mailto:york@jabber.isoc.org>
Skype: danyork   http://twitter.com/danyork

http://www.internetsociety.org/<http://www.internetsociety.org/deploy360/>