If we take as given that critical infrastructures are vulnerable to a cyber terrorist attack, then the question becomes whether there are actors with the capability and motivation to carry out such an operation.

With those people, I'm very far apart, because I believe that government access to communications and stored records is valuable when done under tightly controlled conditions which protect legitimate privacy interests.

Generally I'm against regulation.

I favor strategies that encourage industry to include some sort of key recovery capability in their systems which would also address user requirements for access.