Stephen,
Steve,
On 10/15/2013 07:03 PM, Stephen Kent wrote:
Competent security folks were not surprised by the technical
capabilities that have been revealed.
It's obvious that one can gain access to tons of metadata with the
assistance of service providers,
and that a first world country can (and would) analyze that data looking
for bad guys.
Competent people have been surprised by the scale here.
The level of collusion and coercion was not obvious to
many.
I was not addressing the level and scale of collusion.
I was noting that the vulnerability was always obvious,
and if one was concerned about the confidentiality of metadata, ...
>From their pre-shutdown reaction, NIST appear both to
be surprised and to think something non-obvious has
occurred and I'm sure you'd consider NIST's crypto
people as being competent.
I think your comment above subtly understates the
situation in a way that's just not credible.
The subtlety is nicely done though:-)
The comment about NIST was not from me, although I
too admire subtlety in such contexts.
Steve
_______________________________________________
perpass mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/perpass