The United States may never sign on to a digital Geneva Convention so long as Russia, China, and Iran continue to outsource much of their dirty work to cybercriminals and contractors. And it will likely never sign onto any agreement that puts its strategic war-planning at a disadvantage. But we need red lines. I believe we can agree on a set of targets that are off-limits for cyberattack, starting with hospitals, food and water supplies, election infrastructure, airplanes, nuclear facilities, and so on.
