Slashdot Mirror
Time For X-No-Wiretap HTTP Header?
Freshly Exhumed writes "A security blogger, acknowledging that the NSA methodically ranks communications on the basis of their 'foreignness' factor to determine candidacy for prolonged retention proposes, is proposing '...an opportunity for us on the civilian front to aid the NSA by voluntarily indicating citizenship on all our networked communications. Here, we define the syntax and semantics of X-No-Wiretap, a HTTP header-based mechanism for indicating and proving citizenship to well-intentioned man-in-the-middle parties. It is inspired by the enormously successful RFC 3514 IPv4 Security Flag and HTTP DNT header.'"
Yes, of course!
This is guaranteed to work almost as good as the Evil Bit, an extra field in IPv4 headers where senders of packets indicate malicious intent, so that people administering firewalls can discard such packets if desired.
(The problem in the first place was that the people wiretapping didn't give a shit about rules, etiquette, and being decent. More rules and etiquette aren't the solution to that problem.)
Rick
You secure it by force.
It is always so irritating to see that this discussion turns into "I am USA citizen, do not spy on me, dear NSA!" What about rest of the world?? How come that in your US centric viewpoint it's all ok to spy on anyone else, just not on US citizens?? What about Europe? Other NATO allies? All ok to spy on everyone else, on your viewpoint!! Love that fat bellybutton of yours!
Somewhere along the line you were given the incorrect information that the US House and Senate have complete oversight of NSA, when in reality it's more accurately the other way around.
Few American commentators seem to be questioning the unstated assumption that spying on non-Americans is perfectly OK, even if there is no reasonable cause for suspicion. By that logic, it's perfectly OK for other countries to spy on all Americans.
Aren't we all entitled to a little privacy?
They are already deliberately violating the law, with impunity. They compromise your security at every step. Adding un-encrypted metadata to your traffic will only:
1 - ID you for possible actions by later custodians of this information
2 - Acknowledge your silent submission to the fact of universal collection as a normative state
3 - Divert efforts from real crypto-countermeasures
People need not to give NSA their complicity and assent, but to resist, and applaud every time somebody manages to FUCK UP their mission.
"Flyin' in just a sweet place,
Never been known to fail..."
Unfortunately the NSA has enough on every individual in the government to make such a move extremely dangerous for the single individual.
NSA, CIA, FBI and DoD have their own life and nobody that is sane would want to challenge them. We have to wait for the insane savior.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
The House and Senate do have oversight of the NSA. If only because they can just cut off funding and fire the NSA at will.
No, they can't. Our overly corrupt president would simply write one of his "executive royal decrees" to give them all the "emergency" funding they need.
Oh please, stop with this 'cut off funding' crap. It's a tear drop in the ocean. Most of NSA and CIA funding comes from the transport and sale of contraband, weapons, drugs, any other 'controlled' substance, and money laundering through the banks. Or do you actually believe that the Iran/Contra hearings put a stop to it? They are rogues in every sense of the word, and now they have the power to keep it going indefinitely.
“He’s not deformed, he’s just drunk!”
Then we need to seriously look at impeaching the president.
Well, then, I suggest we invoke the other Poe's law: Nevermore!
http://www.rootstrikers.org/