<html><head></head><body><div dir="auto">Hi Randy<br><br>Agreed and I'm not saying we should just hand everything over on a gold plate to LE. Bien we cannot just say no all the time, but should actually come up with solutions we feel are good or a good compromise.<br><br>I expect LE to understand our issues, but we should understand theirs <br><br>Best<br>Serge</div><br><br><div class="gmail_quote"><div dir="auto">On 10 April 2024 16:25:26 UTC, Randy Bush <randy@psg.com> wrote:</div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail"><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"><div dir="auto">In a recent talk Jane Easterly said: "The private sector has promised<br>better security for yeas but has not delivered. This has to change".<br></div></blockquote><div dir="auto"><br>was this not in the context of software and platform safety? easterly<br>has been riding that hobby horse for a few years, and with serious<br>justification.<br><br>but i agree that the RIRs could be clearer in what they can and can not<br>do for LE. and there needs to be a balance of visibility and privacy.<br>LE is always gonna want more; that's their job, and we need them. but,<br>as jeff schiller said (in the ietf protocol design context) "Law<br>enforcement was not supposed to be easy. Where it is easy, it's called<br>a police state."<br><br>randy<br><br></div></pre></blockquote></div><div dir="auto">--<br>Dr. Serge Droz<br>Director, Forum of Incident Response and Security Teams<br><a href="https://first.org">https://first.org</a></div></body></html>