Re: ART FOI review - myGov Code Generator app source code

--===============8979543219505350214==
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature";
	boundary="=-ht/NYnTjDgkuBU3Ab+XA"


--=-ht/NYnTjDgkuBU3Ab+XA
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable


1) a FOI request might not result in the Code Generator source code,
but FOI should be able to illuminate the decision making around how the
app came to be, say versus a list of recommended TOTP apps.

2) a potential claim that the app has a national security sensitivity
would imply the agency has done a lot of paperwork to meet the
requirements of a novel national security cryptographic system, and
some of that may be obtainable by FOI. In particular the list of ISM
exceptions would be long and fundamental, eg: the TOTP secret key does
not roll over often enough, the app is fielded onto uncontrolled
hardware and unmanaged operating systems.

-glen

--=-ht/NYnTjDgkuBU3Ab+XA
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----

iGwEABECACwWIQTe/Jmxd43ni8odCHCd+sN+Fh/aDwUCaViBNA4cZ2R0QGdkdC5p
ZC5hdQAKCRCd+sN+Fh/aDxZOAKCc26y8aqx1wkIPFC7dx2jRyTORGgCgpcA2+2Lt
CjJDKwdLbDGv46Mn+kw=
=ZYII
-----END PGP SIGNATURE-----

--=-ht/NYnTjDgkuBU3Ab+XA--

--===============8979543219505350214==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
linux-aus mailing list
[email protected]
https://lists.linux.org.au/mailman/listinfo/linux-aus

To unsubscribe from this list, send a blank email to
linux-aus-unsubscribe-cunTk1MwBs8iFSDQTTA3OBCuuivNXqWP@public.gmane.org

--===============8979543219505350214==--