Mastering the Internet

Roland Perry ukcrypto at chiark.greenend.org.uk
Sun, 3 May 2009 21:57:28 +0100


In article <87zldu5d0z.fsf@mid.deneb.enyo.de>, Florian Weimer 
<fw@deneb.enyo.de> writes
>>> An order is only required if the CSP resists a polite request to install
>>> a permanent intercept capability.
>
>>> It's not illegal to install one, just [currently] to operate it without
>>> warrants to extract content from communications.

For the avoidance of doubt, when I talk about the legality of using such 
facilities, I mean "by the authorities" to intercept content without 
getting individual warrants.

>> Hang on ... that one's from Orwell, am I right?
>
>No, most routers deployed on the Internet already have that
>capability.  IPFIX/Netflow export functionality is very common, and
>there are also monitor ports and (E)RSPAN, which provide payload
>access.  I think that for diagnostic purposes, capacity planning etc.,
>it's also legal to use them.

It is clearly legal (but somewhat outside the scope of the current 
complaints) for the CSPs to use the facilities for their own engineering 
purposes.
-- 
Roland Perry