Cameron’s internet law has huge loopholes

cameronThe Draft Investigatory Powers Bill presented by the UK Home Secretary Theresa May to parliament earlier this week has a loophole so wide you could park a 747 in it, sideways.

This is legislation that will force UK ISPs to keep an Internet Connection Record for a year and force Apple and Google to abandon consumer level encryption.

But the entire law fails to mention the one thing which makes the whole law pointless – Virtual Private Networks (VPNs).

For a few pounds a year you can install some ‘customer-friendly’ VPN software which makes every transaction show up as encrypted traffic.  This makes them the tool of choice of any paedophile child sex ring and practically mandatory for terrorists.

It is surprising that May didn’t think of these. Other control freak politicians like  Vladimir Putin are obsessed with them. So why didn’t the Draft Investigatory Powers Bill mention them?

Under proposed changes to the law as described in the bill, no-one will be able to offer an encrypted service for which it cannot provide a key, as is the case with local encryption on iOS. It is possible that May believes her law can force foreign VPNs to hand over encryption keys in advance (in order not to be blacklisted by blighty-based ISPs.

It seems unlikely that it would happen, besides avoiding blacklists is easy – just ask anyone who uses Pirate Bay in the UK.