RE: Solution for Travelling with PC encrypted PC to restricted countries

[Eric Krumm <ekrumm () commercemicro com>]

You are not exporting the encryption technology by having it implemented on a system that originates in a country where 
the encryption is permitted.  Therefore, you have nothing to worry about!


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of imran.khan () 
alcatel-lucent com
Sent: Tuesday, September 14, 2010 2:47 PM
To: security-basics () securityfocus com
Subject: Solution for Travelling with PC encrypted PC to restricted countries

Hello, 

I am currently investigating processes/ methods to be used for travelers with full disk encryption when travelling to 
restricted countries (as defined under the export control regulations EAR in the U.S. and OECD in Europe and other 
countries).  Based on your extensive experience can you comment on these below?

1.      Is there an alternate solution when encrypted laptop cannot be taken to restricted countries due export 
controls etc.?  Some options that are floated are 
a.      Provide with a standard image (without encryption on a new drive (for travel only and user)
b.      Data can be accessed via the network drive or PC backup location when in the visiting country's offices
c.      Carry data on USB (but this could require inspection/ decryption)
2.      Is there a coordinated list of restricted countries (between Canada, EU, U.S. and others?
3.      What is the approach taken when traveling to permitted countries (cross border travel) such as U.S. and others 
with encrypted laptops, where the officials may ask to surrender or decrypt the laptops for inspection?
4.      Legal considerations data use and storage as some laws may require the data to reside in physically in the 
country 
5.      How are the global companies handling this when their users travel to restricted countries?

Many thanks in advance for your thoughts and feedback.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and 
who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell 
if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your 
Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing 
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



This e-mail and any files transmitted with it are for the
sole use of the intended recipient(s) and contain
information that may be privileged and confidential.  Any
unauthorized review, use, disclosure or distribution is
prohibited.  If you are not the intended recipient of this
e-mail, please delete this e-mail and any files transmitted
with it and notify the sender immediately.


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------