From: Zooko O'Whielacronx Date: Wed, 6 Oct 2010 05:11:47 +0000 (-0700) Subject: docs: add statement on our refusal to insert backdoors X-Git-Tag: trac-4800~49 X-Git-Url: https://git.rkrishnan.org/Site/Content/Exhibitors/module-simplejson.scanner.html?a=commitdiff_plain;h=7c37292a09df6729a4076a53fcd7ffac4bfc3717;p=tahoe-lafs%2Ftahoe-lafs.git docs: add statement on our refusal to insert backdoors --- diff --git a/docs/backdoors.txt b/docs/backdoors.txt new file mode 100644 index 00000000..c08e26c9 --- /dev/null +++ b/docs/backdoors.txt @@ -0,0 +1,25 @@ +Statement on Backdoors + +October 5, 2010 + +The New York Times has recently reported that the current U.S. administration is proposing a bill that would apparently, if passed, require communication systems to facilitate government wiretapping and access to encrypted data: + + http://www.nytimes.com/2010/09/27/us/27wiretap.html (login required; username/password pairs available at http://www.bugmenot.com/view/nytimes.com). + +Commentary by the Electronic Frontier Foundation (https://www.eff.org/deeplinks/2010/09/government-seeks ), Peter Suderman / Reason (http://reason.com/blog/2010/09/27/obama-administration-frustrate ), Julian Sanchez / Cato Institute (http://www.cato-at-liberty.org/designing-an-insecure-internet/ ). + +The core Tahoe developers promise never to change Tahoe-LAFS to facilitate government access to data stored or transmitted by it. Even if it were desirable to facilitate such access—which it is not—we believe it would not be technically feasible to do so without severely compromising Tahoe-LAFS' security against other attackers. There have been many examples in which backdoors intended for use by government have introduced vulnerabilities exploitable by other parties (a notable example being the Greek cellphone eavesdropping scandal in 2004/5). RFCs 1984 and 2804 elaborate on the security case against such backdoors. + +Note that since Tahoe-LAFS is open-source software, forks by people other than the current core developers are possible. In that event, we would try to persuade any such forks to adopt a similar policy. + +The following Tahoe-LAFS developers agree with this statement: + +David-Sarah Hopwood +Zooko Wilcox-O'Hearn +Brian Warner +Kevan Carstensen +Frédéric Marti +Jack Lloyd +François Deppierraz +Yu Xue +Marc Tooley