Interception Modernisation Programme
Charles Lindsey
ukcrypto at chiark.greenend.org.uk
Fri, 10 Oct 2008 10:21:23 +0100
On Thu, 09 Oct 2008 15:06:04 +0100, Richard Clayton
<richard@highwayman.com> wrote:
> In article <Pine.SOC.4.64.0810091334550.509@bowling.cent.gla.ac.uk>,
> Chris Edwards <chris@eng.gla.ac.uk> writes
>
>> On Wed, 8 Oct 2008, Richard Clayton wrote:
>>
>> | if your webmail system allowed a snooper to determine which account
>> was
>> | logged in to, then the pattern would show up in the traffic
>> analysis...
>>
>> Virtually all webmail traffic is HTTPS
>
> You'd think so wouldn't you ....
>
>> - hence a snooper (presumably!)
>> cannot determine which account is being accessed, nor who is being
>> emailed.
>
> ... but in practice a great deal is not!
But even if so, it is not traffic data, so you would need a warrant from
the Secretary of State to look at it. (I thought nothing after the '/' in
the URL was traffic data).
--
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131
Web: http://www.cs.man.ac.uk/~chl
Email: chl@clerew.man.ac.uk Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9 Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5