On 10/1/09 17:57, Ian G wrote:
On 10/1/09 00:48, someone wrote:
I'm asking you is this by any means legal?
My off-the-cuff entirely not-a-lawyer answer:
Yes: in a company, they own or control all the assets, so they can
distro the MITM root key at their behest.
No: Privacy regulators would likely think of it as "uneccessary",
regardless of the above.
Yes: with any service provider, there are generally contract clauses
that will permit it. If they know they are going to do this, they will
change the contracts well in advance.
No: It is can be considered to be a technical breach of the policies &
systems put in place by the vendors. Which is now these days a crime.
Yes: In some industries it is required by legislation to monitor and
escrow all communications. This would be finance, primarily.
No: but you can't talk about it because your NDA :)
Yes: but if you have a breach because of it, you'll be so deep in the
doo-doo that you will wonder why you ever thought it could be legal.
iang
_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto