Via Bruce Schneier's blog, this paper ought to be required reading for everyone with legislative authority.