I prefer leaving things to the market as much as possible.

Although cyber attacks have caused billions of dollars in damage and affected the lives of millions, few if any can be characterised as acts of terrorism.

We have never really had absolute privacy with our records or our electronic communications - government agencies have always been able to gain access with appropriate court orders.

However, leaving everything to the market is not necessarily good for society.

I favor strategies that encourage industry to include some sort of key recovery capability in their systems which would also address user requirements for access.

Everyone is a proponent of strong encryption.

I don't have a particular recommendation other than that we base decisions on as much hard data as possible. We need to carefully look at all the options and all their ramifications in making our decisions.