funsec mailing list archives

Re: [privacy] Nevada Law Mandates Encryption of Electronically-Transmitted Personal Information


From: Valdis.Kletnieks () vt edu
Date: Mon, 08 Oct 2007 17:49:47 -0400

On Mon, 08 Oct 2007 14:34:43 CDT, Brian Loe said:

How about disallowing the use of a fax machine to transmit personal
information? Too low-tech of a solution for you?

Go ahead and try to get that to actually fly.

The company I used to work for once spent a week faxing prescription
information to a bank. That same company spent a day calling another
bank to try and keep them from continuing to fax personal financial
information to them. Faxes suck and they shouldn't be used.

And if it was encrypted on the wire, it would *still* have been faxing
*encrypted* perscription info that then gets printed out in plaintext to a
bank, and spending a day calling another bank to make them stop faxing
*encrypted* personal info that then gets printed out in plaintext.

The problem isn't on the wire, the problem is at the *endpoints*.  Changing
the on-wire representation doesn't fix the endpoints.

Attachment: _bin
Description:

_______________________________________________
privacy mailing list
privacy () whitestar linuxbox org
http://www.whitestar.linuxbox.org/mailman/listinfo/privacy

Current thread: