Share.

15 Comments

  1. cfs3corsair on

    Folks, Ottawa is feeling pressure due to public and expert backlash. I am a social studies teacher; this bill is on the defensive. Now is the time for us to really amp up efforts and put this bill into the shredder where it belongs.

    Don’t let up on the pressure. Contact your MPs and Senators. Make some noise.

    There is now a petition against the metadata retention and encryption backdoor requirements of Bill C-22: https://www.ourcommons.ca/petitions/en/Petition/Details?Petition=e-7416

    Resources:

    Multiple groups have made easy to use tools for sending your MP and (other members of government) an email about rejecting this terrible legislation in its current form:

    * The Internet Society’s tool: https://www.internetsociety.org/our-work/internet-policy/keep-canada-protected/

    * OpenMedia’s messaging tool: https://action.openmedia.org/page/188754/action/1

    * ICLM’s messaging tool: https://iclmg.ca/stop-c-22/

    I’d also recommend emailing Minister of Public Safety of Canada (Gary Anandasangaree: gary.anand@parl.gc.ca), and the Minister of Justice (Sean Fraser: sean.fraser@parl.gc.ca).

  2. CitySeekerTron on

    Who wants to do business with a country who has government-mandated holes in its standard encryption? That’s just a giant espionage target that affects everybody living or working in, through, and via Canada.

  3. Fluid_Lingonberry467 on

    The liberals still haven’t put in any laws about facial recognition.
    They are all for big business 

  4. falsejaguar on

    Like the backdoors the CIA has into Mac OS and Windows that Linus refused?

  5. JohnAMcdonald on

    That is a very speculative interpretation of bill c-22 that depends on how the judges interpret it.

  6. Maybe I’m lost, but the bill very clearly states that a core provider is not required to comply with any regulations that may introduce a vulnerability or prevent the rectification of a vulnerability. I can’t find anything in the bill that states otherwise.

    Restrictions
    (4) Paragraph (2)‍(d) does not authorize the making of regulations that require core providers to retain information that would reveal
    (a) the content — that is to say the substance, meaning or purpose — of information transmitted in the course of an electronic service;
    (b) a person’s web browsing history; or
    (c) a person’s social media activities.

    Systemic vulnerability
    (5) A core provider is not required to comply with a provision of a regulation made under subsection (2), with respect to an electronic service, if compliance with that provision would require the provider to introduce a systemic vulnerability related to that service or prevent the provider from rectifying such a vulnerability.

    And definitions:

    electronic protection means authentication, encryption and any other prescribed type of data protection.‍ (protection électronique)

    systemic vulnerability means a vulnerability in the electronic protections of an electronic service that creates a substantial risk that secure information could be accessed by a person who does not have any right or authority to do so.‍ (vulnérabilité systémique)

Leave A Reply