Schneier: ISPs should bear security burden

That's a good question.

- ferg