Re: POLICY ALERT: College and University CALEA Exemption Rests on Private Network Status

["George C. Russ" <george.russ () CITADEL EDU>]

Private networks:

http://www.educause.edu/ir/library/pdf/EPO0654.pdf
The FCC's order also strongly suggests that interconnected networks
will be considered private when made available only to limited
constituencies, rather than to the general public. Thus, campus networks
that offer Internet connectivity but are made available only to
students, faculty, and administrators-and that exclude the public at
large, for example by requiring university ID cards to gain access to
networked terminals and by requiring password authentication on wireless
networks, among other measures-almost certainly would be considered
private.
Many institutions provide some degree of network access-including access
to the Internet-to members of the local community or the public at large
(for example, at a computer terminal within a library or student
center). While offering such access may serve other goals, it will
significantly increase the risk that the campus network would be deemed
"public" and thus subject to CALEA. It is possible that limited or
incidental use by the public would not undermine the overall
characterization of a network as private, particularly if the
institution maintains a policy confining public access to a small number
of network access points and allows it only during limited hours.
Because the limits on qualifying as a private network operator have yet
to be clarified or tested, however, institutions that seek to avoid any
obligations under CALEA should adopt policies that prohibit public
access to campus networks.

http://www.educause.edu/ir/library/pdf/EPO0628.pdf
FCC's clarification in the court brief is that only gateway equipment is
subject to CALEA.


George
--------------------------------------------------------------
ITS/Network Operations and Security 
The Citadel               Charleston SC 29409 
--------------------------------------------
The Citadel: Achieving excellence in the education of principled leaders


-----Original Message-----
From: Valdis Kletnieks [mailto:Valdis.Kletnieks () VT EDU] 
Sent: Friday, July 14, 2006 4:40 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] POLICY ALERT: College and University CALEA
Exemption Rests on Private Network Status

On Fri, 14 Jul 2006 15:08:48 CDT, Alan Amesbury said:

> I'm sure many/most of us have to service.  (Yes, I'll say it:  What of
> NAT?  Does each Linksys WRT54G now need CALEA hooks?)

You're not the only one to say it.  You way wish to grab a baseball bat
or lead pipe or something, and smash that camel across the nose while
its
nostrils are still outside the tent.

If you want to *really* worry, consider the proposed legislation that
would eliminate essentially *all* judicial review of wiretapping by
the Federal executive branch:

http://www.eff.org/news/archives/2006_07.php#004824

For the draft of the Specter bill:
http://www.eff.org/Privacy/Surveillance/NSA/specter_draftbill_071306.pdf

Thank you Arlen Specter.