ZA approves RIP analog

Andrew Cormack A.Cormack at ukerna.ac.uk
Thu, 3 Oct 2002 16:44:37 +0100


> ----------
> From: 	Quentin Campbell[SMTP:Q.G.Campbell@newcastle.ac.uk]
> Reply To: 	ukcrypto@chiark.greenend.org.uk
> Sent: 	Friday, September 27, 2002 9:08 AM
> To: 	ukcrypto@chiark.greenend.org.uk
> Subject: 	RE: ZA approves RIP analog
> 
> 
> It seems to me that the way we (and most other UK acdemice sites)
> operate our spam filtering is no different in kind to our anti-virus
> measures. Why is there this apparent fixation on automated anti-virus
> scanning to the exclusion of all other content/address scanning that
> goes on in a modern Mail Hub?
> 
Hello Quentin.
I originally raised the question in the context of the OIC guidance on
employee monitoring which stated that virus checking was interception. So
that's where that specific issue came from. I'm very well aware that SPAM
checking systems are functionally indistinguishable from virus scanners
(except that virus scanners have a higher success rate!), but it was hard
enough to explain it to the OIC in the context of viruses, which they
thought they understood!

As far as I know the discussion on this list exhausted the issue - I'm
convinced that any scanning system that doesn't pass content to a human is
lawful - but I don't know whether the final version of the guidance will
still contain that unfortunate statement.

> Maintaining the integrity of mail systems and recipient hosts against
> the growing tide of viruses, worms, spam, etc, is a constant struggle.
> It would be unfortunate if uncertainty over interpreting RIPA and the
> DPA stops Postmasters deploying the powerful automated tools that we
> need to help us in this struggle. 
> 
> It would be ironic indeed if one anti-terrorist measure (RIPA) prevented
> UK sites from actively defending against another terrorist threat (cyber
> warfare).
> 
Almost exactly my words to the OIC :-)

Cheers,
Andrew

> Quentin
> ---
> PHONE: +44 191 222 8209    Computing Service, University of Newcastle
> FAX:   +44 191 222 8765    Newcastle upon Tyne, United Kingdom, NE1 7RU.
> ------------------------------------------------------------------------
> "Any opinion expressed above is mine. The University can get its own." 
> 
>