[AusNOG] Consultation on s313(3) use

[Paul Wilkins]

Yes, but this is not Russia. The sites they will want blocked will either
be illegal content (child pornography, terrorism related) or phishing
sites. In both cases, the security services are quite entitled to terminate
the service as a criminal enterprise. The point being not to firewall out
the content (which is not achievable), but to prevent inadvertent access -
eg. https://www.ÇBA.com.au <https://www.xn--ba-3ia.com.au>. After that,
perps cannot claim they were browsing https://www.12yovirgins.com by
accident.

Kind regards

Paul Wilkins

On 4 May 2016 at 08:25, Mark Smith <markzzzsmith at gmail.com> wrote:

>
> On 2 May 2016 7:16 PM, "Paul Wilkins" <paulwilkins369 at gmail.com> wrote:
> >
> > Mark,
> > I'm glad you raised the point, as it needs to be clarified that the
> purview of the s313 inquiry is "disruption" of services. It's not required
> to read the data stream. For the purposes of s313 it should be sufficient
> to read the SSL certificate, and then block by either white list or black
> list.
> >
>
> You're assuming that the entire HTTPS website's content is "prohibited",
> so this censorship can be implemented at a certificate granularity.
> Incorrect assumption.
>
> "Russia blocks Wikipedia"
>
> http://www.businessinsider.com.au/wikipedia-blacklisted-in-russia-2015-8?r=US&IR=T
>
>
> > John,
> > For better or worse, we're heading to a future where SSL will not be
> banned, but it will be licensed. This in my view is what's driving the
> ongoing spat between the FBI and Apple.
> >
> > Kind regards
> >
> > Paul Wilkins
> >
> > On 2 May 2016 at 13:49, Mark Newton <newton at atdot.dotat.org> wrote:
> >>
> >> On May 2, 2016, at 1:41 PM, John Lindsay <johnslindsay at mac.com> wrote:
> >>
> >> > This is easy. Just ban ssl. Sorted.
> >>
> >> Sure, they can do that, and we’ll all keep using it. Maybe we’ll rename
> it “TLS” so we don’t have to tell them that their ban has been unsuccessful.
> >>
> >>   - mark
> >>
> >>
> >>
> >>
> >> _______________________________________________
> >> AusNOG mailing list
> >> AusNOG at lists.ausnog.net
> >> http://lists.ausnog.net/mailman/listinfo/ausnog
> >
> >
> >
> > _______________________________________________
> > AusNOG mailing list
> > AusNOG at lists.ausnog.net
> > http://lists.ausnog.net/mailman/listinfo/ausnog
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20160504/3a1af1a1/attachment.html>