You can\u2019t get more private than I am right now: in a locked room, alone, unconnected to anything.<\/p>\n
Privacy is personal. It\u2019s not a service provided by somebody else. It\u2019s not an agreement with a \u201cprovider,\u201d or with anyone. And it won\u2019t be until someone knocks on my door.<\/p>\n
The room, the door and its lock are all privacy technologies. So are the clothes I am wearing. If I choose to let a person into my room, I am still being private about the parts of my body concealed by my clothes.<\/p>\n
Since I\u2019m living in a world that has been civilized for many generations, the signals sent to others by the privacy technologies I use\u2014starting with shelter and clothing\u2014are respected. Nobody (even my wife) comes through my closed door without knocking, and nobody plants a tracking beacon inside my clothes so they or their friends can follow me like a marked animal as I go about my life.<\/p>\n
It\u2019s essential to recognize the personal nature of privacy, because in the online world we still lack the equivalents of shelter and clothing, so those are still on the punch list of requirements for civilizing that world.<\/p>\n
Meanwhile, for lack of civilization online, great advantages are taken of our inability to create private spaces for ourselves, and to signal what\u2019s okay and what\u2019s not okay, to help others respect those spaces. This is why, for example, most ad-supported websites today plant tracking beacons in our browsers. They can, so they do.<\/p>\n
Still, tracking somebody without a personal invitation or a court order is wrong on its face. It can\u2019t be excused because it\u2019s easy, because it supports better analytics, because it might provide a better \u201cadvertising experience,\u201d or because the site operator can\u2019t find another way to make money. Privacy is just as personal in the online world as it is in the offline one, and violating one\u2019s privacy in the online world is just as wrong as well.<\/p>\n
To truly create privacy in the online world, developers need to make privacy technologies for individuals that scale, just as developers in bygone millenia did with shelter and clothing in the offline world.<\/p>\n
Scale means an individual should be able to create privacy for herself that works the same everywhere she goes, and to signal what\u2019s okay in ways that can be understood and obeyed in the same ways by all the websites she visits and all the services she engages online.<\/p>\n
Providing privacy should not be a grace of others\u2019 service terms and privacy policies. That not only prevents scale for individuals, but does so to a degree that is ludicrous in the extreme: it\u2019s like requiring everybody to speak a different language for every entity they deal with. It also causes large social, legal and economic frictions for everyone involved.<\/p>\n
This is why there is no job more important for developers today than providing individuals with privacy technologies that scale, and means for signaling personal privacy policies and intentions that scale as well.<\/p>\n
Laws and regulations at this stage won\u2019t do it. Worse, they put the regulatory cart in front of both the technology horse and the norms that follow widespread technology use. For lack of personal privacy technologies and norms, laws such as the the EU\u2019s GDPR and California\u2019s SB 315 presume little or no personal agency, and thus insist that personal privacy be only provided by others. These laws risk removing more personal agency than they might have secured, had we developed the personal privacy technologies first.<\/p>\n
Early personal privacy technologies such as crypto, PKI, VPNs and onion routing are necessary but insufficient. We need to think and work long, hard and well to create privacy as complete and useful online as it is offline.<\/p>\n
NOTE: This is the first in a series of blog posts I\u2019ll be writing here, to accompany a Privacy Manifesto that is also in the works. Stay tuned for the rest. In the meantime, I welcome all the positive input you can provide in the comment section below. Thanks.<\/p>\n","protected":false},"excerpt":{"rendered":"