Slashdot Mirror
Domain: telecomasia.net
Stories and comments across the archive that link to telecomasia.net.
Stories · 2
-
ISPs Removing Their Customers' Email Encryption
Presto Vivace points out this troubling new report from the Electronic Frontier Foundation: Recently, Verizon was caught tampering with its customer's web requests to inject a tracking super-cookie. Another network-tampering threat to user safety has come to light from other providers: email encryption downgrade attacks. In recent months, researchers have reported ISPs in the U.S. and Thailand intercepting their customers' data to strip a security flag — called STARTTLS — from email traffic. The STARTTLS flag is an essential security and privacy protection used by an email server to request encryption when talking to another server or client.
By stripping out this flag, these ISPs prevent the email servers from successfully encrypting their conversation, and by default the servers will proceed to send email unencrypted. Some firewalls, including Cisco's PIX/ASA firewall do this in order to monitor for spam originating from within their network and prevent it from being sent. Unfortunately, this causes collateral damage: the sending server will proceed to transmit plaintext email over the public Internet, where it is subject to eavesdropping and interception. -
The Australian Broadband Disaster
David Gerard writes "Monopolies are bad, mmmkay? Robert Clark of TelecomAsia discusses the disaster that is broadband in Australia - its 2% takeup putting Australia behind such dynamic economies as Estonia. 'Telstra controls the local loop, is the largest mobile carrier with two digital networks, is the largest retail ISP, the largest wholesale data and Internet provider, and is a 50% shareholder in the biggest pay TV company.'"