"There are two types of encryption: one that will prevent your sister from reading your diary and one that will prevent your government"
About this Quote
Schneier’s line lands like a friendly joke and then quietly turns into a warning. The “sister reading your diary” image is deliberately domestic: it frames encryption as a small, almost childish act of privacy. We’ve all wanted a lock that keeps out the nosy person in the next room. Then he yanks the camera back to the real antagonist: the state. The pivot is the point. It’s not that governments are uniquely villainous; it’s that they’re uniquely capable. They have legal authority, budgets, coercive power, and time. Encryption that stops petty snooping is easy; encryption that withstands institutional pressure is where politics begins.
The subtext is a rebuke to a common rhetorical dodge in tech policy: treating “privacy” as a matter of personal embarrassment rather than power. If your threat model is just your sister, you can settle for convenience and weak protections. If your threat model includes the government, you’re forced to confront surveillance, compelled access, and the temptation to build “exceptional” backdoors that magically work only for the good guys. Schneier’s cynicism is technical: a system that can be broken on command will be broken off command.
Context matters: Schneier has spent decades arguing that security isn’t a product you buy, it’s an adversarial relationship you manage. This quip compresses that worldview into a single dichotomy: encryption isn’t one thing, and the difference between “good enough” and “actually secure” is measured in who gets to demand entry.
The subtext is a rebuke to a common rhetorical dodge in tech policy: treating “privacy” as a matter of personal embarrassment rather than power. If your threat model is just your sister, you can settle for convenience and weak protections. If your threat model includes the government, you’re forced to confront surveillance, compelled access, and the temptation to build “exceptional” backdoors that magically work only for the good guys. Schneier’s cynicism is technical: a system that can be broken on command will be broken off command.
Context matters: Schneier has spent decades arguing that security isn’t a product you buy, it’s an adversarial relationship you manage. This quip compresses that worldview into a single dichotomy: encryption isn’t one thing, and the difference between “good enough” and “actually secure” is measured in who gets to demand entry.
Quote Details
| Topic | Privacy & Cybersecurity |
|---|---|
| Source | Help us find the source |
More Quotes by Bruce
Add to List








