Hacker News new | ask | show | jobs
by xnull2guest 4229 days ago
You will, however, be bound by current 'lawful intercept and storage' laws. If you provide a remote computing service (email, hosting, cloud storage, fitness tracking, etc) you will be bound by 18 U.S.C. ยง 2703(f) [1]. If you provide telecommunications you will be bound by CALEA [2]. You will be bound by the Stored Communications Act and by the Patriot Act, and you will be bound to provide access to the core of your service and/or your private keys if you are given an NSL.

Essentially - you can not provide secure communication as a service.

If you try to provide it as a product it's more blurry. With precedents like Blackberry, RSA and Skype you need to make sure you're operationally able to deal with extreme levels of leverage and influence.

[1] http://www.law.cornell.edu/uscode/text/18/2703

[2] https://en.wikipedia.org/wiki/Communications_Assistance_for_...
1 comments
joering2 4229 days ago
Will this also apply if your server is outside US. Example: you're using an US company (Rackspace) that is hosting your website in HongKong.

Is there anywhere a list of "nay" voters.. I want to put few phonecalls in place tomorrow, express my disgust.

link
g4k 4229 days ago
Yes, it will apply. Hosting location does not matter [1] [2]

[1]: http://www.theregister.co.uk/2014/09/23/microsoft_vs_the_lon...

[2]: http://www.zdnet.com/yes-u-s-authorities-can-spy-on-eu-cloud...

link
quesera 4229 days ago
US companies are bound by US laws.

Companies doing business in the US are bound by US laws.

Server location not so important.

link