FBI, NSA Want Master Encryption Keys from Internet Companies
July 25, 2013 7:06 PM
comment(s) - last by
The question of whether it's legal for them to ask for these SSL keys or not is unclear
The feds are trying to creep further into the personal lives of Web users by requesting master encryption keys from Internet companies.
According to a new report from
, the Federal Bureau of Investigation (FBI) and the National Security Agency (NSA) have both tried to obtain master encryption keys as part of their
digital surveillance efforts
, but there's a huge question as to whether they have the legal authority to do so.
Master encryption keys are crucial to Web encryption. They put contents of Web communications into code that is tough to crack using Secure Sockets Layer (SSL). If government agencies were to get their hands on these SSL keys, they could decode the content and peek into the lives of Internet users.
The NSA is also looking to get these SSL keys because it would allow for surveillance through its fiber taps, which are now heavily guarded by SSL.
SSL was originally put in place because of insecure and open Wi-Fi networks. Google adopted HTTPS (which appears in the browser to show that SSL is enabled -- back in 2010 for Gmail, and Microsoft did the same for Hotmail. Later in 2012, Facebook followed suit for its popular social network.
Now, these large Internet companies face the fear of government agencies trying to obtain the SSL keys and expose information on their users. Microsoft, Google and Facebook all said that they haven't given any SSL keys to the government, and agreed that they would fight against doing so.
Other larger companies like Apple, Verizon, AT&T, Yahoo, Comcast and AOL haven't said if they've been asked for or have given SSL keys to the feds.
But the larger companies fear that smaller Web establishments without deep pockets or a hefty legal department will give in to the government's requests for keys.
SSL has certainly hindered the government's spying abilities, which is why they're coming directly to the source for the keys. But if all else fails, the feds have other avenues of
getting what they need
. For instance, companies like Packet Forensics help government agencies import "legitimate" copies of SSL keys -- which could possibly be obtained through a court order -- for spying on users.
Speaking of a court order, it's not clear whether federal surveillance laws allow the government to ask for SSL keys -- even with subpoenas. Subpoenas call for gathering evidence related to an investigation, where SSL keys would seem to open up a treasure trove of data that may contain pieces of information relevant to an investigation, but likely most that are not.
This article is over a month old, voting and posting comments is disabled
RE: Too little too late
7/28/2013 5:42:14 PM
That's a complete tucking lie! Ive had it with people blaming Bush for everything Obama has done. ENOUGH!!
There is nothing in the Patriot Act that grants the Government the authority to spy en mass on all Americans. There is nothing granting the NSA authority to collect "meta data" on everyones phone and Internet activity. And exactly when the Fuck did Bush go after All Internet encryption keys!
This is ALL Obama. Stop being a pussy and hiding behind Bush on every goddamn issue!
RE: Too little too late
7/30/2013 12:00:33 PM
Which part of it specifically is a lie?
The Prism signed up Microsoft, Yahoo, and Google during Bush administration. That's a fact.
Mark Klein blew the whistle on AT&T diverting all of its call traffic to NSA as early as 2003. That's a fact.
In the final days of its administration Bush granted retroactive immunity to any ISPs (including AT&T) that might have passed information to the government without proper warrant. That's a fact.
And on the most recent vote on funding the NSA surveillance program only 94 republicans out of 234 voted to defund the program. Also a fact.
As I said before, I'm not defending Obama's record on this matter. While he may not have started any of these programs, he did nothing to stop them either. Instead he greatly expanded them.
However, if your argument is to vote republican, then it's nothing but a folly for you cannot be seriously suggesting voting Republicans as more than half of them voted to keep the NSA system in place. Republicans want to keep the program in place even more so than Democrats.
In the big picture both parties are complicit on this issue, democrats and your beloved republicans alike.
Here, go educate yourself:
The only way you can show your disapproval is to keep voting third party of "none of the above". Yes, in the former case you would be throwing your vote away, and in the latter case it would be just a symbolic gesture that would accomplish nothing. However, voting for either of the two main parties will ensure that the program will keep running.
"We don't know how to make a $500 computer that's not a piece of junk." -- Apple CEO Steve Jobs
NSA Spying Fallout Hits Defcon, Hackers Tell Feds to Stay Away
July 12, 2013, 9:00 AM
Source: Don't Worry, NSA Spies on "99 Percent" of Americans' Locations, Call Records
June 14, 2013, 3:57 PM
Tech's Biggest Loser on Tax Day: eBay Pays Nearly 99 Percent Tax Rate
April 15, 2015, 3:28 PM
Death and Dragons -- Report Claims Game of Thrones Hit by Piracy "Tidal Wave"
April 10, 2015, 8:37 AM
Court Blocks Twitter and YouTube in Turkey After Pro-Communist Attack in Istanbul
April 6, 2015, 10:53 AM
In Graphics and Quotes: $10.4 Billion Charter & Bright House Merger
April 2, 2015, 5:19 PM
WSJ Report Implies That Google Leveraged Lobbying to Kill Antitrust Abuse Probe
March 25, 2015, 5:37 PM
Nationalist Hackers From Turkey Cause Chaos, Deface Dozens of Sites
March 16, 2015, 12:29 PM
Most Popular Articles
Raytheon $1.9 Billion Purchase of Websense Raises Tough Questions
April 20, 2015, 1:57 PM
HBO to VPN HBO Now Users: Prove You Live in U.S. or We Will Terminate You
April 21, 2015, 12:17 PM
After Record-Setting Week, Samsung Predicts 70 Million GS6/GS6 Edge Sales
April 17, 2015, 8:39 PM
AMD CEO: Windows 10 Will Launch at "The End of July"
April 20, 2015, 7:24 PM
Quick Note: Lady Macbath -- One Japanese Woman's Apple Themed Revenge
April 23, 2015, 11:47 AM
Latest Blog Posts
Sceptre Airs 27", 120 Hz. 1080p Monitor/HDTV w/ 5 ms Response Time for $220
Dec 3, 2014, 10:32 PM
Costco Gives Employees Thanksgiving Off; Wal-Mart Leads "Black Thursday" Charge
Oct 29, 2014, 9:57 PM
"Bear Selfies" Fad Could Turn Deadly, Warn Nevada Wildlife Officials
Oct 28, 2014, 12:00 PM
The Surface Mini That Was Never Released Gets "Hands On" Treatment
Sep 26, 2014, 8:22 AM
ISIS Imposes Ban on Teaching Evolution in Iraq
Sep 17, 2014, 5:22 PM
More Blog Posts
Copyright 2015 DailyTech LLC. -
Terms, Conditions & Privacy Information