Cybercrime Treaty Pushes Surveillance Worldwide 89
bs0d3 writes "As part of an emerging international trend to try to 'civilize the Internet', one of the world's worst Internet law treaties — the highly controversial Council of Europe (CoE) Convention on Cybercrime — is back on the agenda. Canada and Australia are using the Treaty to introduce new invasive, online surveillance laws, many of which go far beyond the Convention's intended levels of intrusiveness. Negotiated over a decade ago, only 31 of its 47 signatories have ratified it. Many considered the Treaty to be dormant but in recent years a number of countries have been modeling national laws based on the flawed Treaty. Leaving out constitutional safeguards, gag orders in place of oversight, and forcing service providers to retain your data may all be coming soon."
Re:Answer = Proxy Server (Score:5, Informative)
Then proxy server providers get told to keep logs just like the ISPs to be perused at leisure by any LEO, who desires it. The guy who got into Palin's Yahoo used a VPN server, and those guys were more than willing to burn him when the Feds came knocking.
Re:Encrypt everything. (Score:5, Informative)
Um.... extensions other than Subject Alternative Name? Because, that has worked fine for a few years now (in browsers, and a few other places anyway).
With a SAN the certificate just simply lists ALL vhosts that it supports. So, while an eavesdropper can see what site you are going to, he can only see it as one of the several sites that you might possibly be going to.
Of course, Verisign makes sure to ass rape you solidly if you want SANs, but that is almost redundant since, they always try to provide that service.
-Steve