My name is Cindy Cohn,
I am the executive director of the Electronic Frontier Foundation.
The EFF is the leading digital civil liberties organization in the world.
We're based in San Francisco.
And, we work to make sure that
your free speech and privacy are protected
when you go online or use digital tools.
The Internet has given us
a tremendous amount of ways to communicate with each other,
ways to keep in touch,
ways to share information.
But, it also---unless you use proper security mechanism---
can leave you kind of uniquely vulnerable
to people attacking your privacy.
The more information we share and store online,
whether that's in your ISP,
whether that's in a cloud computing service,
or social networking service,
that information could be available
to people who are bad guys,
it could be available to government snoops or spys,
it could be available to people
who might want to do you harm.
Encryption is the technology that helps keep you safe.
I use encryption,
because I believe that my clients
deserve the protection necessary
to be able to tell me what's going on
and let me give them the best advice possible.
And, this isn't just because its my belief,
it's actually the way the law expects lawyers---
lawyers actually can get into trouble
if they don't protect the information
that their clients entrust with them.
We're in a trusted position.
And, so, it's the rules for us,
we can lose our licenses,
it's the law that protects that privilege,
and it's the right thing
if you really want people to trust you
so that you can advocate for them.
They have to be able to tell you the whole story.
The legal system really depends
on the protection of this privilege
and so it's important that our technology do so too.
It's really not right to
have all of these legal requirements and protections all setup,
but the technology not allowing us that same level.
And GPG helps me feel assured
that in practice I'm keeping things
as protected as the law
encourages me to do so.
Encryption is one of those tools
that helps protect people
as they are seeking out information
that might otherwise be transgresive
where they are.
And that's true whether you are a kid
who is wondering about their sexual orientation
or whether you're a kid
who is wondering about another religion,
or you're an adult who is in a place
where the way that you think may be different
than the way everyone else around you thinks.
It's very common--and I think
allowing people the ability
to have a protected conversation
is just central to that.
You need to be able to have
a private conversation in the digital age
for all the same reasons
that you needed to be able to have
a private conversation in the analog age.
I would say the one that is---
that I talk about the most at the EFF---
is about the ability to make political change.
Somebody had to turn to somebody else and
say "I'm not comfortable with slavery;
"I think that slavery is a bad thing"
and at the time that that communication happened,
that had to be a secret;
it was a very transgressive idea.
But enough people talking to each other about this,
and organizing, and talking about with each other,
and eventually, we were able to end slavery in this country.
We have similar issues in our society today.
That process happens.
But it has to happen---
it has to have protection---
at some level in order for
it to to be able to occur.
This has groundings in the law,
in the United States.
Those same conversations happen online now.
And, for us not to recognize that
and take steps to ensure that
you can have a private conversation online,
I think, is for us to lose something
as we move into the ditial age.
So, there is still ground
that we need to work on---
both technologically and substantively---
but I think of GPG as one of the core tools
that we need if we're going to have functioning self-government
in the United States or around the world.
The nice thing about encryption technology is it---
it doesn't care who your adversaries are.
It protects you from big and small adversaries alike.
What do I work with?
We work with people
who are nervous about the US government,
we work with people
who are worried about foreign governments,
we work with people
who are worried about foreign non-state actors
---you know people who have been involved in,
say, the drug war in Mexico
and who need to protect their communications
against the local warlords
or the mafia, the local organizations.
We've taught how to use GPG to those groups.
For me, some of my clients are worried about just the opposing side,
the person who wants to sue them,
the person who's trying to stop them
from doing what they are doing,
which might not necessarily be the government.
The nice thing about GPG
or any encryption technology,
is it gives you the protection
regardless of what your threat model is.
You might make different choices
about which technologies you use,
but encryption protects you regardless
and it doesn't evaluate
whether you've met some certain standard of needing it
before it gives you the protection,
it just gives you the protection.
When it comes to being worried---
especially about government surveillance---
people on the right and people on the left are equally concerned.
They just tend to be concerned at different times.
I've had people email me using GPG from all across the spectrum.
I would say that most of the people
who ask EFF to help are not even in
the kind of left/right political spectrum.
In particular, that's not particularly important to them.
They tend to be people who want to speak.
I don't know how you do left/right
if you're talking to activists
in the middle east who are trying to
figure out how to get back online
when the government's unplugged things.
It's certainly the case that right now,
the way that the issue has been framed,
it's law enforcement
and people who support strong law enforcement
who tend to be worried about encryption.
But, on the other side of it,
people who worry about cybersecurity,
which you know, we have a cybercommand in the United States right now---
I mean---they understand the value of encryption.
I think of it as the difference
between defense and offense, really.
And, from my perspective,
I'd much rather have a strong lock on my door
than be assured that the cops
could solve the crime after the case.
I'd rather not be robbed
than make sure that they could take steps
that might make it easier for them
to solve the crime after it happens.
I think it is a little crazy to think
that the answer to the fact that people are robbed
is to make sure they have less security.
I know that there are several people who
have only contacted me through GPG.
Whether they would have found another way
to contact me without it,
it is kind of never a question that I've asked them.
But, I think if people are using it,
it means that it is important to them.
Suffice it to say, there have definitely been sensitive communications
that I was very happy I was able to have over encryption channels.
And, that, your civil liberties have been protected as a result.
No comments:
Post a Comment