We have never really had absolute privacy with our records or our electronic communications - government agencies have always been able to gain access with appropriate court orders.

I favor strategies that encourage industry to include some sort of key recovery capability in their systems which would also address user requirements for access.

Although cyber attacks have caused billions of dollars in damage and affected the lives of millions, few if any can be characterised as acts of terrorism.

I think most organizations have an interest in key recovery, at least with respect to stored data.

Further, the next generation of terrorists will grow up in a digital world, with ever more powerful and easy-to-use hacking tools at their disposal.

I prefer leaving things to the market as much as possible.

While the vast majority of hackers may be disinclined towards violence, it would only take a few to turn cyber terrorism into reality.