Interception Modernisation Programme

Charles Lindsey ukcrypto at chiark.greenend.org.uk
Fri, 10 Oct 2008 10:21:23 +0100


On Thu, 09 Oct 2008 15:06:04 +0100, Richard Clayton  
<richard@highwayman.com> wrote:

> In article <Pine.SOC.4.64.0810091334550.509@bowling.cent.gla.ac.uk>,
> Chris Edwards <chris@eng.gla.ac.uk> writes
>
>> On Wed, 8 Oct 2008, Richard Clayton wrote:
>>
>> | if your webmail system allowed a snooper to determine which account  
>> was
>> | logged in to, then the pattern would show up in the traffic  
>> analysis...
>>
>> Virtually all webmail traffic is HTTPS
>
> You'd think so wouldn't you ....
>
>> - hence a snooper (presumably!)
>> cannot determine which account is being accessed, nor who is being  
>> emailed.
>
> ... but in practice a great deal is not!

But even if so, it is not traffic data, so you would need a warrant from  
the Secretary of State to look at it. (I thought nothing after the '/' in  
the URL was traffic data).

-- 
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131                       
   Web: http://www.cs.man.ac.uk/~chl
Email: chl@clerew.man.ac.uk      Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5