I favor strategies that encourage industry to include some sort of key recovery capability in their systems which would also address user requirements for access.

While the vast majority of hackers may be disinclined towards violence, it would only take a few to turn cyber terrorism into reality.

The concern is over what will happen as strong encryption becomes commonplace with all digital communications and stored data. Right now the use of encryption isn't all that widespread, but that state of affairs is expected to change rapidly.

I prefer leaving things to the market as much as possible.

Systems are complex, so controlling an attack and achieving a desired level of damage may be harder than using physical weapons.

I favor strategies that encourage industry to include some sort of key recovery capability in their systems which would also address user requirements for access.

If we take as given that critical infrastructures are vulnerable to a cyber terrorist attack, then the question becomes whether there are actors with the capability and motivation to carry out such an operation.