Mastering the Internet
Roland Perry
ukcrypto at chiark.greenend.org.uk
Sun, 3 May 2009 21:57:28 +0100
In article <87zldu5d0z.fsf@mid.deneb.enyo.de>, Florian Weimer
<fw@deneb.enyo.de> writes
>>> An order is only required if the CSP resists a polite request to install
>>> a permanent intercept capability.
>
>>> It's not illegal to install one, just [currently] to operate it without
>>> warrants to extract content from communications.
For the avoidance of doubt, when I talk about the legality of using such
facilities, I mean "by the authorities" to intercept content without
getting individual warrants.
>> Hang on ... that one's from Orwell, am I right?
>
>No, most routers deployed on the Internet already have that
>capability. IPFIX/Netflow export functionality is very common, and
>there are also monitor ports and (E)RSPAN, which provide payload
>access. I think that for diagnostic purposes, capacity planning etc.,
>it's also legal to use them.
It is clearly legal (but somewhat outside the scope of the current
complaints) for the CSPs to use the facilities for their own engineering
purposes.
--
Roland Perry