Britain to control crypto - official (fwd from Usenet)

The British government quietly announced yesterday that it will legislate to restrict crypto. The details are in the attached Reuters and PA newswires. Fuller details will no doubt be available at a one day workshop that the Ministry of Defence is organising at the IEE in Savoy Place on the 27th June. The speakers will include directors of both CESG (GCHQ's front operation) and DRA, as well as a policeman and the data protection registrar. The IEE's phone number is 0171 240 1871. Ross RTf 06/10 1355 UK to license information encryption services LONDON, June 10 (Reuter) - The British government unveiled proposals on Monday aimed at meeting the demand for encryption services to safeguard the confidentiality of electronic information transmitted on public telecommunications networks. Technology minister Ian Taylor published a paper proposing a licensing system for so-called "Trusted Third parties," or TTPs, to provide encryption services. "The TTPs would offer digital signature, data integrity and retrieval, key management and other services for which there is a commercial demand," Taylor said in a written parliamentary answer. Taylor said encryption services would facilitate the development of electronic commerce, thus helping to maintain Britain's competitiveness. The licensing policy would aim to protect consumers as well as to preserve the ability of intelligence and law enforcement agencies to fight serious crime and terrorism, Taylor said. This would be done by establishing procedures for disclosure to them of the encryption keys, under safeguards similar to those which already exist under the Interception of Communications Act, he added. Taylor said officials in his department had already held preliminary discussions with industry groups on the concepts set out in Monday's paper. Following consultation by the Department of Trade and Industry on detailed proposals, the government intends to bring forward legislation, Taylor added. PA 06/10 1808 MOVE TO STRENGTHEN INFORMATION SECURITY By Parliamentary Staff, PA News The Government tonight announced plans to strenthen the security of information sent electronically over public telecommunications networks. Technology Minister Ian Taylor, in a Commons written reply, disclosed proposals to licence trusted third parties to provide encryption services -- the process of transforming text into an unintelligible form that can only subsequently be recovered by someone possessing the corresponding decryption key. These services cover the digital signature, an electronic equivalent of a hand-written signature, of electronic documents and the protection of the accuracy and privacy of contents. Mr Taylor said: "There is a growing demand for encryption services to safeguard the integrity and confidentiality of electronic information transmitted on public telecommunications networks. "The Government therefore proposes to make arrangements for licensing trusted third parties who would provide such services." These would include digital signature, data integrity and retrieval and key management services. "The licensing policy will aim to protect consumers as well as to preserve the ability of the intelligence and law enforcement agencies to fight serious crime and terrorism by establishing procedures for disclosure to them of the encryption keys, under safeguards similar to those which already exist for warranted interception under the Interception of Communications Act." Mr Taylor, who disclosed publication of a paper, said it was intended to bring forward proposals for legislation after consultation on detailed policy proposals. The Trade and Industry Department said increased use of IT systems by British business and commerce was a major factor in their improved competitive position, but had brought increased security risks -- especially concerning integrity and confidentiality of information passed electronically between trading bodies. Prime candidates to be trusted third parties could include banks, network operators and trade associations. -- A host is a host from coast to coast.................wb8foz@nrk.com & no one will talk to a host that's close...........(v)301 56 LINUX Unless the host (that isn't close).........................pob 1433 is busy, hung or dead........vr vr vr vr.................20915-1433

The British government quietly announced yesterday that it will legislate to restrict crypto.
Does anyone here have any idea what this does to british-affiliated states like Anguilla, or the Caymans? Cheers, Bob Hettinga ----------------- Robert Hettinga (rah@shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "If they could 'just pass a few more laws', we would all be criminals." --Vinnie Moscaritolo The e$ Home Page: http://www.vmeng.com/rah/

The British government quietly announced yesterday that it will legislate to restrict crypto. The details are in the attached Reuters and PA newswires.
[snip]
"The TTPs would offer digital signature, data integrity and retrieval, key management and other services for which there is a commercial demand," Taylor said in a written parliamentary answer.
It's been said before, but I'll say it again. I have no objection with this. If people wish to safeguard their encryption/signature keys by leaving them with a "trusted third party", then they should be able to do so. If this is a requirement, then it's hardly a service for which there is a "commercial demand". I assume that followup news releases (or the aforementioned workshop) will clarify the situation. -- Marshall Marshall Clow Aladdin Systems <mailto:mclow@mailhost2.csusm.edu> "We don't have to take it; never have, never will. Gonna shake it, gonna break it; let's forget it: better still" --The Who, "Tommy"

On Tue, 11 Jun 1996, David Lesher wrote:
Fuller details will no doubt be available at a one day workshop that the Ministry of Defence is organising at the IEE in Savoy Place on the 27th June. The speakers will include directors of both CESG (GCHQ's front operation) and DRA, as well as a policeman and the data protection registrar. The IEE's phone number is 0171 240 1871.
I'm going to be in London on the 27th- any other Cypherpunks ready to make a show of it? Simon

Some more thoughts... 1) What activities will require TTP licencing? Will all certification agencies be required to be licenced? What about if I sign a friends key? Or if I hold a key signing party and offer to sign the key of anyone showing a valid drivers licence or other picture ID? 2) Will all certification agencies be required to require disclosure of private keying material before issuing a certificate? 3) Will laws be made requiring all commercial transactions using public key certificates to be performed using certificates issued by a TTP in order for such transactions to be valid? 4) Will LEAs be permitted to impersonate a non-consenting third party for the purposes of allowing a conversation to be intercepted? (blatant violation of the 4th ammendme... oh shit- never mind). Simon. --- Cause maybe (maybe) | In my mind I'm going to Carolina you're gonna be the one that saves me | - back in Chapel Hill May 16th. And after all | Email address remains unchanged You're my firewall - | ........First in Usenet.........
participants (4)
-
David Lesher
-
Marshall Clow
-
Robert Hettinga
-
Simon Spero