Thursday, March 29, 2007

internet telephony to be tapped


Telephony over the internet should be allowed to tap according to a dutch polictician. Even encoded calls should be 'tappable' by requesting the key from the vendor of the application.

Ofcourse there's tapping, but if the politician thinks this will unfold all the dark spots on the internet I think he forgets one way:

What if a call is encrypted using PGP ?

Dont know if it's done already but I think this will avoid being tapped though.


2 comments:

Anonymous said...

There are lot's of ways to encrypt a call. I think he's talking about Skype and SIP. SIP as used by for example XS4All doesn't have crypto at all.

End-users are always able to add their own crypto. Something like OpenVPN already can give you crypto and the easiest of them all is SSH.

He probably doesn't know enough about crypto, but he has a point when he talks Skype only. Because the vendor has the key and someone should find a legal way to crack it ;)

zenonymous said...

Skype is the biggest player in voip world, so yeah they could get those kind of 'give us your key' requests in the future.

I still love the envelope reference as argument for encryption:

"when you send a vacation greetings card the mailman could read it, but if you send business mail for example: you would like an envelope because of the content"

Still, I think the content does not have to let you decide whether to use an envelope or just send it plain.