My another rant..
So, India's National Encryption Policy Draft is out and is seeking suggestions from general public before implementing it. There is whole lot of story in it, however, I will go through some basic stuff in short:
1. They want every citizen to be aware of encryption system and expect everyone tech savvy enough to understand it too.
2. They want everyone including business, citizens to have copy of all their encrypted communication in plain text format for atleast 90 days and should present if asked by law, if you can't, face legal action.
3. They want all worldwide app / web provider using encryption to register with Govt. of India (there are millions of websites using encryption and being accessed in India).. else all will illegal.
4. They want to have plain text version of all information, it may implies that all ecommerce and other institution also store un-encrypted version of user data so that in case of hack.. hacker gets to know everything without trouble .. ? So your password on digit forum will be stored in plain text format..
In short, they don't want to hide anything from Govt.. technically making encryption useless.. since you can't really use it for your privacy..
There is even more.. however, I could be wrong in interpreting it but ..this doesn't make sense at all, what kind of policy it is, I wonder who are those experts drafted this policy ? Or it is intentionally made this way to become NSA of India ? I don't see how these policy are practical , moreover if they are implemented the way Govt. suggested in draft, will it not be an abuse of democracy ?
Apparently all citizens can send their comments on the draft policy to akrishnan@deity.gov.in by October 16 and give suggestions.
Rant source: National Encryption Policy Draft of India inviting suggestions - are you serious ?
So, India's National Encryption Policy Draft is out and is seeking suggestions from general public before implementing it. There is whole lot of story in it, however, I will go through some basic stuff in short:
1. They want every citizen to be aware of encryption system and expect everyone tech savvy enough to understand it too.
2. They want everyone including business, citizens to have copy of all their encrypted communication in plain text format for atleast 90 days and should present if asked by law, if you can't, face legal action.
3. They want all worldwide app / web provider using encryption to register with Govt. of India (there are millions of websites using encryption and being accessed in India).. else all will illegal.
4. They want to have plain text version of all information, it may implies that all ecommerce and other institution also store un-encrypted version of user data so that in case of hack.. hacker gets to know everything without trouble .. ? So your password on digit forum will be stored in plain text format..
In short, they don't want to hide anything from Govt.. technically making encryption useless.. since you can't really use it for your privacy..
There is even more.. however, I could be wrong in interpreting it but ..this doesn't make sense at all, what kind of policy it is, I wonder who are those experts drafted this policy ? Or it is intentionally made this way to become NSA of India ? I don't see how these policy are practical , moreover if they are implemented the way Govt. suggested in draft, will it not be an abuse of democracy ?
Apparently all citizens can send their comments on the draft policy to akrishnan@deity.gov.in by October 16 and give suggestions.
Rant source: National Encryption Policy Draft of India inviting suggestions - are you serious ?
