So Who Wanted to Break the Internet … Governments, Law Enforcement … and Banks?

--

Our digital world has very little trust, and many of the problems that we have relate to the complete lack of trust in anything that we see on-line.

Very few emails that we receive, too, can ever be properly trusted (in fact no emails can really be trusted that someone has faked them, changed the contents, or read the message).

At one time it was fairly easy of intruders to listen to our communications, but, then SSL/TLS came along to fix a problem of the sniffing of network traffic, but it is merely a sticking plaster. Many modern day firewalls, though, break these communications, as they have the required private keys which are able to break the tunnel. But TLS 1.3 will make it a whole lot more difficult, as digital certificates will not be used for the keys.

The new standard is defined as RFC 8446 [here]:

The nightmare for governments and law enforcement is end-to-end encryption, and where data is encrypted at its source. Then it doesn’t matter if you use a tunnel or not, the data will not be cracked and only the hosts on either end will know the key. If the…

--

--

Prof Bill Buchanan OBE FRSE
ASecuritySite: When Bob Met Alice

Professor of Cryptography. Serial innovator. Believer in fairness, justice & freedom. Based in Edinburgh. Old World Breaker. New World Creator. Building trust.