Compulsory Routers in your country

[Max Mehl]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Carsten Agger <agger at modspil.dk> [ 16. Jan 2014 @ 16:11 +0100]:
> If you can change your router (ideally to one running only free software,
> using protocols specified by the ISP), you can protect yourself in the case
> where you trust your ISP, but not the router it supplies you.
> 
> In that scenario, if you don't trust your ISP all is lost unless you use
> VPN or Tor.
> 
> How to trust your ISP would be the "next problem" after getting rid of 
> compulsory routers, I suppose.

Yes, you're completely right.
After the NSA leaks, the usage of Tor/VPN increased heavily and people started
to secure their online privacy and security in different ways. But
paradoxically less people care about their basic network security. One can
also use plain HTTP instead of sophisticated anonymisation techniques if his
"inner circle" is compromised.
The leaks before the end of 2013 stated that NSA successfully redirected
network traffic to shadow servers with cloned content if the hardware is
backdoored/insecure. So if your router isn't secure, your traffic is neither,
no matter which tools you use - Man-in-the-middle says hello.

I really hope the importance of this topic will be stressed in the upcoming
months in some other IT magazines and on conferences.

Best,
Max

- -- 
Max Mehl - Free Software Foundation Europe (FSFE)  -  fsfe.org
Schönhauser Allee 6/7, 10119, Berlin | Phone:  +49-30-27595290
About me: http://fsfe.org/about/mehl | Blog: blog.max-mehl.com
Support us:  http://fsfe.org/support | Homepage:  max-mehl.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)

iQEcBAEBAgAGBQJS1/skAAoJEOxlXmdUnkHi6RMH/RrXXQJMR80CqeDW4ptbTR8L
yxiG9bQb5UTozNPTzgMbqq1nNkC3URijyhIoXRLgx6vJLibSk5qkKqgdfHcQPCWq
uC3fc7cK/4tT19+2XeG2Iai5Gze3UlI1QykzlTcPpbMjVbvdzxDMMwk8jNU16kfl
nIrlJiH2hvlKITj5ydA3w1Be2+Mq/j9vUBoZwnM8qKMWkUYWP4mU3ULa8h1cODN/
gBWLGfsC/mu6h3R2948D4anbBc7lCL+GjOz1Xjs264XcKgMqAfdTjL2NJ4HOcv+m
a4TZ9xW+bcDAqCzdbybdwwxkTQjdIux0zNs4YHLfOegObBHx4/f6Thb6KWzI6nk=
=v+aD
-----END PGP SIGNATURE-----