Opinion: The Pentagon's troubling new battle against Internet anonymity
Loading...
When the Pentagon updated its听cybersecurity strategy last month, one key aspect that didn't attract much attention was its attack on Internet anonymity.听
In fact, the Department of Defense used the updated strategy to听rather boldly proclaim that it seeks to 鈥渞educe anonymity鈥 because it听鈥渆nables malicious cyberactivity鈥 by state and nonstate groups.
This isn't the first time Defense officials have spoken out against anonymity, although it may be the boldest and most conspicuous opposition yet to secrecy on the Web.听Back in 2009,听Robert Lenz, the former chief information officer for the DOD, gave听a speech at the Black Hat security conference in which he emphasized the need to 鈥渄rive anonymity out of the network.鈥 Specifically, Mr. Lenz called this our country鈥檚 鈥渕ost important foundational priority.鈥
The Pentagon's new strategy identifies several problems with anonymity. First, American efforts to deter cyberintrusions are hindered when the US can't punish intruders because anonymity shields their identities.听 What's more, anonymity impedes the Pentagon's ability 鈥渢o conduct response and denial operations against an incoming cyberattack.鈥
Anonymity is the classic double-edged sword. On one hand, it serves as a cloak for criminals and other adversaries engaged in malicious online activities. On the other, it shields individuals from retaliation for expressing their views.
Specifically, anonymity facilitates the free speech essential to a democracy by protecting individuals who express unpopular views. It also protects dissidents from torture at the hands of oppressive regimes. Think about the bloggers, journalists, and online activists who used Tor anonymity software to protect their identities when engaged in online speech during the Egyptian revolution.
In addition to activists and dissidents, anonymity can shield whistleblowers from official retaliation. And, more generally, it holds out to individuals the promise of a modicum of privacy in an increasingly connected world.
Throughout US history, we have enjoyed what the Supreme Court calls 鈥渢he honorable tradition鈥 of anonymous speech. The original architecture of the Internet preserved this tradition as it facilitated a significant degree of anonymity. In the early 1990s, on college campuses across the US, students who wished to connect to the Internet could simply plug their computers into any Ethernet jack on campus. (This ability to be anonymous online led to the now-iconic New Yorker cartoon with the caption "on the Internet nobody knows you're a dog.").听
But today听pressure is building to drive anonymity out of our networks. Some of that pressure comes from businesses seeking a robust identity infrastructure to alleviate fraud and other financial crimes. Indeed, when we bank online, we want our banks to know they are dealing with us and not an imposter. Pressure also comes from our government, as online anonymity poses a challenge from both a law enforcement and a national security perspective. The concern is that online anonymity will create a safe haven from which criminals and terrorists can operate with impunity and thereby thwart law enforcement and national security efforts.
Technology, government, and industry forces are converging toward the creation of an identity layer in the net. Once such a layer is created, there will be increasing pressure on users to provide identification prior to accessing online resources.
While the Pentagon's drive to reduce听the anonymity of malicious actors is understandable, we must be careful not to throw the baby out with the bathwater. Anonymity has long been essential to the functioning of our democracy. A failure to change the course we are on could lead to the death of Internet anonymity as we know it 听鈥 and along with it the freedom of expression and political activity it often guards.听
听