From real-time intercepts to stored records: Why encryption drives the government to seek access to the cloud

Abstract

This paper explains how changing technology, especially the rising adoption of encryption, is shifting law enforcement and national security lawful access to a far greater emphasis on stored records, notably records stored in the cloud. The major and growing reliance on surveillance access to stored records results from the following changes: - Encryption. Adoption of strong encryption is becoming much more common for data and voice communications, via virtual private networks, encrypted webmail, SSL web sessions, and encrypted Voice over IP voice communications. - Declining effectiveness of traditional wiretaps. Traditional wiretap techniques at the ISP or local telephone network increasingly encounter these encrypted communications, blocking the effectiveness of the traditional techniques. - New importance of the cloud. Government access to communications thus increasingly relies on a new and limited set of methods, notably featuring access to stored records in the cloud. - The 'haves' and 'have-nots'. The first three changes create a new division between the 'haves' and 'have-nots' when it comes to government access to communications. The 'have-nots' become increasingly dependent, for access to communications, on cooperation from the 'have' jurisdictions.