Security Focus story

[Alexander W. Janssen]

On 3/9/07, Eugen Leitl <eugen at leitl.org> wrote:
> On Fri, Mar 09, 2007 at 08:37:58AM +0100, Alexander W. Janssen wrote:
>
> > If TOR would legally qualify as an ISP, we're in deep trouble.
>
> We don't provide access to the Internet, and we're not charging
> for it. Last time I looked the data retention laws also allowed
> a loophole for very small providers.

I hope so, although I wonder how "small" will be defined. How would
you tell how many users your have on your TOR-node?

> > Keyword: the upcoming data-retention laws in Europe.
>
> Even if you ran a Tor node with logging, and you gave
> BKA a slice for the time window they ask you for, that
> would be quite useless.

No; the point is if you'd qualify as an "access provider" you need to
enable "relevant logging". ETSI already defined interfaces and
data-sets which would come quite handy.

But I agree with you: The law isn't here yet.

Alex.


-- 
"I am tired of all this sort of thing called science here... We have spent
millions in that sort of thing for the last few years, and it is time it
should be stopped."
 -- Simon Cameron, U.S. Senator, on the Smithsonian Institute, 1901.