<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Wed, Mar 11, 2015 at 8:21 AM, Henry Baker <span dir="ltr"><<a href="mailto:hbaker1@pipeline.com" target="_blank">hbaker1@pipeline.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">FYI --<br>
<br>
<a href="https://www.venafi.com/blog/post/what-venafi-trustnet-tells-us-about-the-clinton-email-server/" target="_blank">https://www.venafi.com/blog/post/what-venafi-trustnet-tells-us-about-the-clinton-email-server/</a><br>
<br>
Digital Certificate Forensics: What Venafi TrustNet Tells Us about the Clinton Email Server<br></blockquote><div><br></div><div>Good stuff.</div><div><br></div><div>I listened with interest to this issue. </div><div><br></div><div>There are some very real issues... but I have yet to hear any good ones on the media.</div><div><br></div><div>Thus I currently believe: </div><div>It is a tempest in a teapot... All federal employees have the option of using </div><div>multiple email accounts in addition to their assigned federal archived accounts. The decision </div><div>to use one or the other sits entirely with the employee. </div><div><br></div><div>None of these email trust issues explored by Venafi cover federal secrets requirements. </div><div>Hillary stated that no classified material was transmitted via email... something which I tend </div><div>to agree with. My limited interaction with classified content taught me that getting stuff </div><div>inside and getting stuff out is brutal and slow. Digital content can take forever... Thus</div><div>classified material would be paper perhaps handwritten or possibly on a secured dedicated </div><div>device like a laptop or MAC-mini. Secured in a physical safe in the home.... Thus encrypted</div><div>links while dear to my heart are not an issue here from what little I know.</div><div><br></div><div>Given the attack profiles of commercial email services and digging behind FISA secret warrants</div><div>the only way to control and manage any of your mail is to manage your own mail server. </div><div>That is to say that the secret warrant needs to be served on you or someone on the external wire</div><div>connection. No doubt Hillary and Bill are only a degree or two away from criminals,</div><div>good and bad, national leaders... this eliminates commercial services like Yahoo, Google,</div><div>Microsoft.... The piles of secret warrants would slurp up wedding plans, yoga workout</div><div>hints cookie recipes and more.</div><div><br></div><div>The number of emails mentioned is large: sent, received, cc, bcc large enough that</div><div>incoming filters and folders would have made the bucketing of mail necessary.</div><div>These buckets would make compliance with the request almost easy. The large numbers </div><div>transferred to the state department also tell me that there was a retention policy </div><div>approaching 100%. The To: and From: pairs should make omissions almost easy to</div><div>discover from the .gov (united states) side.</div><br>Back to large... the message page count "by her count, she had found some 30,000 <br>official-business emails covering 55,000 pages" is so large that sorting through them</div><div class="gmail_quote">for bits of lint to spin and weave into something political challenges my skeptical mind.</div><div class="gmail_quote"><br></div><div class="gmail_quote">Back to Venafi they have a product to sell. This is a good newsie topic to analyze and turn</div><div class="gmail_quote">into marketing literature and a case study that CIOs and CFOs of all companies need to think </div><div class="gmail_quote">about. Sony may be a new customer ;) already.</div><div class="gmail_quote"><br></div><div class="gmail_quote">One disclosed message -- paraphrased: "B meet me in Georgetown at the cafe nearest the</div><div class="gmail_quote">statue of Old Fuss and Feathers" needs explanation.</div><div class="gmail_quote"><br><br></div><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"> T o m M i t c h e l l</div></div>
</div></div>