<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Dear Olaf,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><br>Thank you for this. I fully support the document.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>But actually I would have preferred if it went further, for example by endorsing Microsoft’s call for a “Geneva Digital Convention” under which states would agree to refrain from stockpiling or using malware.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Or by supporting calls to strengthen the provisions in the ITU Constitution that go in the same direction as the proposals in the document, see for example:<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> <a href="http://justnetcoalition.org/2014/on_UN_HCHR_privacy_report.pdf">http://justnetcoalition.org/2014/on_UN_HCHR_privacy_report.pdf</a> </span><o:p></o:p></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Best,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Richard<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Chapter-delegates [mailto:chapter-delegates-bounces@elists.isoc.org] <b>On Behalf Of </b>Olaf Kolkman via Chapter-delegates<br><b>Sent:</b> Tuesday, April 7, 2020 11:01<br><b>To:</b> chapter-delegates@elists.isoc.org<br><b>Subject:</b> [Chapter-delegates] PDP: Government Hacking Fact Sheet<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-family:"Arial","sans-serif"'><br><br><o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>Dear Colleagues,<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>Encryption, a critical component of our day to day lives, has seen a rise in deployment. It is a welcome development as we rely on encryption for so many critical activities of daily life.<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>Encrypted information is, if implemented well and used well, not accessible to Government entities such as law enforcement or intelligence agencies. Many governments seek ways for them to access encrypted data. Some governments try to gain access through exploiting vulnerabilities in systems, software, or hardware – also known as “government hacking”.<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>We have looked at government hacking and developed a draft fact sheet with our position and a set of guidelines on this issue. We invite your feedback on the draft here: <a href="https://isoc.box.com/s/m87dxud10i1o180dygx06dhzjdrsw3bk"><span style='color:#3983C4'>https://isoc.box.com/s/m87dxud10i1o180dygx06dhzjdrsw3bk</span></a><o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>In particular we would like to know if you have any concerns with our approach and if this factsheet would be helpful for you or your organization to use when working with policymakers in your countries.<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>Please send your feedback before April 23 to kolkman@isoc.org.<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>Kind regards,<o:p></o:p></span></p><p><span style='font-family:"Arial","sans-serif"'>--Olaf Kolkman<o:p></o:p></span></p></div><div class=MsoNormal align=center style='text-align:center'><span style='font-family:"Arial","sans-serif"'><hr size=3 width="100%" align=center></span></div><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width="80%" style='width:80.0%;border-collapse:collapse'><tr><td width="50%" style='width:50.0%;padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal>Olaf M. Kolkman<o:p></o:p></p></td><td width="50%" style='width:50.0%;padding:.75pt .75pt .75pt .75pt'></td></tr><tr><td width="50%" style='width:50.0%;padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal>Principal - Internet Technology, Policy, and Advocacy<o:p></o:p></p></td><td width="50%" style='width:50.0%;padding:.75pt .75pt .75pt .75pt'></td></tr><tr><td width="50%" style='width:50.0%;padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><a href="https://www.internetsociety.org/">Internet Society</a><o:p></o:p></p></td><td width="50%" style='width:50.0%;padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal align=right style='text-align:right'>Tweets as: <a href="https://twitter.com/@kolkman">@kolkman</a><o:p></o:p></p></td></tr></table><div class=MsoNormal align=center style='text-align:center'><span style='font-family:"Arial","sans-serif"'><hr size=3 width="100%" align=center></span></div></div></div></div></body></html>