In 2011, we published “Why (Special Agent) Johnny (still) Can’t Encrypt,” which examined protocol, implementation, and usability failures in the P25 encrypted two-way radio protocol used by federal and local law enforcement. In 2019, we’re still seeing lots of sensitive clear traffic on federal systems. This talk will examine what changed, what didn’t, and the difficulties of fixing protocols, standards, and practices in real deployed systems.