Top
Best
New

Posted by Cider9986 1 day ago

France moves to break encrypted messaging(reclaimthenet.org)
278 points | 133 comments
jemmyw 1 day ago|
The article is a lot more nuanced than the title or what most folks are discussing in comments. France has politicians voting in both directions and thus far the "keep encryption and enshrine it in law" side is ahead slightly.

> Senator Olivier Cadic, of the Centrist Union, secured an amendment to a separate bill on critical infrastructure resilience and cybersecurity that would do the opposite, writing encryption protection into French law and prohibiting any obligation on messaging services to install backdoors. The Senate adopted it in March 2025.

nickslaughter02 1 day ago|
> His bill was examined in committee at the National Assembly in September and has been stalled since.
heinrich5991 1 day ago||
This article incorrectly implies that Telegram is end-to-end encrypted, by putting it in the same line as WhatsApp and Signal.

Telegram doesn't even try to be end-to-end-encrypted by default. WhatsApp claims to be end-to-end-encrypted, but it's not open-source, Signal is end-to-end-encrypted.

riedel 1 day ago||
Open source would not help without the reproducible builds of Signal (I wonder who check them on each release?). And only builds like Molly include no binary blobs of Google [1], which could IMHO at least be used to extract some metadata. Leaving the OS still as a risk, even for Molly or Matrix clients. Even with transparency around linked devices, I would believe that few people would notice silently linked devices. Simplest thing is I guess social engineering which happened in a coordinated attack on Signal messagers of German politicians recently (I guess there should be an official signal app version not supporting linked devices for such people) [2].

[1] https://news.ycombinator.com/item?id=46081855 [2] https://www.politico.eu/article/hackers-attack-phone-of-germ...

adrianN 1 day ago||
Politicians should probably not use Signal but something that is controlled by the government and for example doesn’t allow „accidentally“ deleting incriminating messages.
rurban 1 day ago|||
If politicians would be effectively controlled by the government and not by some independent party those mysterious, oops, accidentally deleted it problems would increase.
librasteve 13 hours ago||
oh dear, my phone was stolen - Morgan McSweeney
ranger_danger 19 hours ago|||
> controlled by the government

So they can spy on them directly?

hellcow 1 day ago|||
> WhatsApp claims to be end-to-end-encrypted, but it's not open-source

And explicitly does not encrypt metadata.

Meanwhile NSA top brass publicly stated, "We kill people based on metadata."

2ndorderthought 1 day ago|||
I imagine in 2027 people will be getting killed over vibes.

Does make you wonder what kind of people they kill or how many. I can't think of a lot of crimes whose metadata warrants being killed for personally.

xethos 1 day ago|||
> I can't think of a lot of crimes whose metadata warrants being killed for personally

You're (literally) missing links then. If A is a high-value target that we look at closely (because they're a high-value target), what if B frequently contacts A? If C, D, and E always recieve messages from B immediately following A messaging B?

What about times? Is B messaging F at a consistant time, and never outside of that? Is A only messaging G, at a set time, with G's phone immediately being put into (ineffective) airplane mode immediately before and after?

Facebook built their business on the social graph, but the CIA's been at this for decades

2ndorderthought 1 day ago||
Thanks for explaining. I guess we are talking about espionage or something like that. I've been so focused on the rise of domestic surveillance lately that I forgot about the noncitizen aspects. Which is ridiculous but at the same time, it does seem like a trillion dollar focus lately.
xethos 1 day ago||
My examples are all based on the CIA and NSA playbook though, as it was the NSA director that said the quiet part out loud, explicitly, in front of Congress. The NSA is effectively America's red team, an offensive arm, meaning they (should be) focused on threats (percieved or otherwise) outside the country

The FBI has been much quieter about this though - there has yet to be a Snowden-for-the-FBI, though they would be one of the agencies I would fully expect to be doing similar work domestically.

As this becomes more well-known, I would expect state and county police to start looking into data and metadata as well. In some cases, they already are [0] - even if some aspects of that case are less relevant today (Google Maps no longer uploads location history, though cell tower trilateration is getting more accurate, not less).

It's far more prevalent than most people realize, though I invite you to consider which you'd rather have when building a second-by-second profile of a person's life: the message contents, or the metadata?

[0] https://www.wired.com/story/find-my-iphone-arson-case/

2ndorderthought 1 day ago||
Metadata would be more powerful in 9 out of 10 cases. Message contents could be invaluable in some cases too. Interesting to think about
tardedmeme 1 day ago||||
Isn't this already happening? It's why the war department uses ChatGPT and Claude to target drone strikes. It's why Anthropic had to make a public scene to pretend that wasn't happening.
Projectiboga 1 day ago|||
In the dystopian novel Nineteen Eighty-Four, thoughtcrime, also known as crimethink in the official language of Newspeak, is the offense of thinking in ways not approved by the ruling Ingsoc party. It describes the intellectual actions of a person who entertains and holds politically unacceptable thoughts; thus the government of The Party controls the speech, actions, and thoughts of the citizens of Oceania.

https://en.wikipedia.org/wiki/Thoughtcrime

2ndorderthought 1 day ago||
It's a great book! It does make you wonder what s future with neural link and data centers in every city looks like under a fascist regime.
Razengan 1 day ago|||
> Meanwhile NSA top brass publicly stated, "We kill people based on metadata.

Can someone post a link to that?

LarsKrimi 1 day ago|||
Maybe just search for it and pick a source you trust. Take the search term "kill people based on metadata" and no noise comes up, just tons of articles about General Hayden's interview and related
ThePowerOfFuet 1 day ago||||
Since you're too lazy to do even a precursory search:

https://youtube.com/watch?v=NSaGl2uO5w

Razengan 17 hours ago||
Cause that sort of shit sounded like ambiguous clickbait
wolvoleo 1 day ago|||
Yes and the secret chats in telegram are super clumsy. Both parties need to be online at the same time for the key exchange, it only works on one device at each side. Nobody I know uses them.

I sent some people a password reset through them but half of them couldn't get their head around it.

So yeah while it has secret chats, they aren't very useful at all.

em-bee 1 day ago||
telegram may not be end-to-end encrypted by default but it does support end-to-end encryption. the generous reading is that this encryption, if used, should be broken.

so as i read it the article doesn't suggest that all of telegram is end-to-end encrypted only that it has support for it.

hilbert42 1 day ago||
Seems to me we're going to have to let the anti-encryption mob have their way until things go wrong—bigtime. No amount of expert advice will convince them until they witness firsthand the negative consequences of weakening encryption.

It's only afterwards and as a consequence some highly newsworthy disasters occur such as a child abduction or political sex scandal involving a high profile politician come to light that the lay public will get the message that weak encryption is effectively no encryption.

In the meantime criminals will be early adopters of more sophisticated messaging such as steganography.

xingped 1 day ago||
Would be nice, but you know they'll carve out exceptions for themselves or use "unauthorized" messaging channels regardless with no consequences. It is _always_ "rules for thee, not for me" with politicians.
mrkeen 1 day ago|||
I don't think I've ever seen a consequence (from a legislator's POV.)

If someone does a high-profile enough hack, that can only mean more laws and increased police power to target it.

nerdsniper 1 day ago|||
This is generally my opinion on accelerationism as a solution to concerning trends:

https://thebad.website/comic/accelerationism

ykonstant 1 day ago||
Yep, that's exactly right.
ttoinou 1 day ago|||
I think there’s no turning back in this kind of laws. What has been lost is lost. In France a lot of public databases were leaked recently. It cannot be undone
Mars008 1 day ago|||
> Seems to me we're going to have to let the anti-encryption mob have their way until things go wrong—bigtime.

Been there, seen that. That's how Pakistan got nuclear bomb. France was just making friends.

rurban 1 day ago||
England gave Pakistan the nuclear bomb. Churchill's "greatest" idea
Razengan 1 day ago|||
> until they witness firsthand the negative consequences of weakening encryption.

They won't be affected.

The hitherto invisible but very real wall between social classes is just going to become more visible for "First World" civilians the way it's been in "lesser" countries for decades already.

Actual "criminals" have always been able to get around all the restrictions ever put in place since the dawn of civilization, it's just the common folk that get trodded on and kept in their place.

BrenBarn 1 day ago|||
In most cases I think the revelation of a scandal involving a high-profile politician would be a good thing. (That is, better than it remaining secret.)
flowerthoughts 1 day ago|||
To be fair, the EU governments led the way to an unencrypted future with TETRA and the broken TEA1 encryption scheme. They're just giving back freedom and openness to the people now. /s
leonidasrup 1 day ago||
Weakening of encryption standards is much older than that.

Weakening of the DES encryption by US goverment in 1970s

https://en.wikipedia.org/wiki/Data_Encryption_Standard

The GSM encryption from 1990s

"Security researcher Ross Anderson reported in 1994 that "there was a terrific row between the NATO signal intelligence agencies in the mid-1980s over whether GSM encryption should be strong or not. The Germans said it should be, as they shared a long border with the Warsaw Pact; but the other countries didn't feel this way, and the algorithm as now fielded is a French design."

https://en.wikipedia.org/wiki/A5/1

golemiprague 1 day ago|||
[dead]
walletdrainer 1 day ago||
[flagged]
dotancohen 1 day ago|||
Did you just openly call for political assassination of French lawmakers in a public forum?
walletdrainer 1 day ago||
The murdering of French lawmakers is something we frequently celebrate here in France.

Your profile suggests that you’re in Israel, where groups like the Irgun are celebrated as national heroes. Violent struggle against perceived oppressors shouldn’t be an unfamiliar concept.

dotancohen 1 day ago||
You are correct, the Irgun are credited along with two other organisations as being the physical protectors of our people during a time when we were more typically known for being slaughtered. However, very few people here are extremists that celebrate the Irgun. Quite the opposite, the Irgun is famous internationally because they were the violent exception to the norm.

Israel was founded by leftists, only in the late 1970s did Israel turn to the right. The Irgun was certainly not representative of those values which are typically associated with our people.

chistev 1 day ago||
Hey, I left you an email.

K.r.i.s.t.i.a.n.i.b.a.n.i @....

Might be in spam. I don't know. Lol.

petre 1 day ago|||
This sounds a bit like Lenin. We know it doesn't work because in the power void created a worse opressor will flourish.

How about I take my business to Ireland if you ban encryption or avoid taxes that fund your paycheck, as an individual?

walletdrainer 12 hours ago||
Would you not kill a man who tries to force their way into your home to read your correspondence? I would!

If you aren’t willing to draw non-negotiable lines, you will simply end up ceding more and more of your freedom in exchange for nothing.

alkindiffie 1 day ago||
So in France you will not be able to send your friend gibberish text that only you and your friend understand. Will they also ban the ability to make new languages that only you and your friends understand. Will they also ban whispering?
kivle 1 day ago||
Or will they ban you from using something like https://github.com/filosottile/age to encrypt and armor text encode things you send inside of the non-encrypted chat?

echo "Am I doing something illegal, France?" | age -e -r age1ql3z7hjy54pw3hyww5ayyfg7zqgvc7w3j2elw8zmrj2kg5sfn9aqmcac8p -a -

  -----BEGIN AGE ENCRYPTED FILE-----
  YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjTVQ5VTdMaTlnRkEyT1BY
  MHZPc0lncHFvbS9FMTlDa2FkK3JQZy9sQnprClRFN3lNQUtnNzJWK0RxQVlYNE1q
  NCtlNFJTUWpwZExJSDMvSGlRL2VHc1EKLS0tIC95bEErRU9NNERJRVVuYlMwUFg4
  WUx1R0IyTHd1d2dxQTdqU0NJWlF0MXMKL1x9fz+ZVObYrn3bY/IdVBsd4KYxn78P
  aWePVjaRUityGTkndNSy6gg1meVky22iv4rxd9MZ4XYnsGJDfRUmkVZhQcCxag==
  -----END AGE ENCRYPTED FILE-----
tonis2 1 day ago|||
Yes, to protect the children ofcourse.
fyltr 1 day ago|||
I have talked about it with a high-ranking french policeman. That person is mostly active in fighting sex-crimes on children, which is the angle I will mostly be referring to. From what I understood, it is very clear to them that even if these laws comes to pass, a good amount of criminal activities will move to other safer options. However, the general criminal is not technically competent. Currently, with WhatsApp providing end-to-end by default, access to pedophilic content is extremely simple. By suppressing these simple means of end to end encryption, the goal is to reduce the amount of people accessing them due to a higher entry bar. What's concerning to me is that it renders anyone using encryption suspect, which includes pedophiles and narcotrafficants, but also activists.

Also, if we're only targetting pedophile networks, one option that comes to mind to me is the following : Most of those images are known and have been circulating for a while. By hashing any sent images and comparing them to the checksum of known ones, one could easily flag suspicions senders and proceed to access the phones of those users. Does that seem feasible to you or am I missing something?

baranul 1 day ago|||
Well, if it is some gibberish between you and friends the state doesn't understand, they will have you silently and continually investigated by a pre-crime unit. You and your friends could be committing "thought-crime".
ykonstant 1 day ago||
But I thought crime---

- He said thought crime! bots start firing the machine guns

phyzix5761 1 day ago|||
They've already banned religious and cultural freedom so why not?
coumbaya 1 day ago||
They did not.
M95D 5 hours ago||
Yes, they did. https://en.wikipedia.org/wiki/French_ban_on_face_covering
euroderf 1 day ago|||
When Loglan & Lojban are outlawed, only outlaws will use Loglan & Lojban. And Klingon.
trolleski 1 day ago|||
But how can they be SURE that you are not a terrorist? Neuralink is the only option!
baranul 1 day ago||
Unknown associations and free speech are too scary. Neuralink and continual surveillance for the win. Pre-crime units at the ready.
fyltr 1 day ago||
I have talked about it with a high-ranking french policeman. That person is mostly active in fighting sex-crimes on children, which is the angle I will mostly be referring to. From what I understood, it is very clear to them that even if these laws comes to pass, a good amount of criminal activities will move to other safer options. However, the general criminal is not technically competent. Currently, with WhatsApp providing end-to-end by default, access to pedophilic content is extremely simple. By suppressing these simple means of end to end encryption, the goal is to reduce the amount of people accessing these networks due to a higher entry bar.

What's of course concerning is that it renders anyone using encryption suspect, which includes pedophiles and narcotrafficants, but also activists and co.

Also, if we're only targetting pedophile networks, one option that comes to mind to me is the following : Most of those images are known and have been circulating for a while. By hashing any sent images and comparing them to the checksum of known ones, one could easily flag suspicions senders and proceed to access the phones of those users. Does that seem feasible to you or am I missing something?

abno525 1 day ago||
Aren't you just describing chat control in its original form, as proposed by the EU?

https://www.eff.org/deeplinks/2025/09/chat-control-back-menu...

https://csa-scientist-open-letter.org/FAQ

fyltr 1 day ago||
It seems so, yes. While I do trust eff, it seems to me that their article barely skims over the explanation of why this is a problem, although the second one does mention the ability to arbitrarily decide what triggers the filters. I would however like to point out that in France, the police cannot arbitrarily arrest people for more than 24 hours, after which they need an investigating judge's approval to prolongate detention. They also need those judges' permission to access a device. Free access to any channels of communication has never been on the table, but extrapolation of that technology to other kinds of governments with more liberal law-enforcement remains the obvious issue.

Still, I kind of fail to see how full privacy as a default is a necessity, if and only if it remains a possibility. Furthermore, by using non open source messengers such as WhatsApp, we are blindly trusting Zuckerberg, a random dude who got lucky and rich and wishes to remain on good terms with Trump, to keep our data as safe and as unreachable as he pretends.

spwa4 1 day ago||
First, the French state has zero interest in access to these messages to help children. The proof: NEITHER the French police NOR the secret service investigate child abuse cases. The police only investigates them if they absolutely can't avoid it, because mostly people with access to children commit child abuse. You will find child abuse requires a child. In other words, who does that? Teachers, sports teachers and coaches and child welfare workers (sports clubs are almost exclusively government funded in France). The large majority of the perpetrators, of course, are government employees. Child services investigates child abuse cases, and WILL NOT get access to these messages. So there is zero intention to give access to messages in child abuse cases.

I mean how ridiculous is this argument. They want access to such messages to investigate child abuse cases, so they demand French spies, and tax investigators get access to everyone's messages ... Child abuse investigators are not even mentioned.

And it's not just that.

Next, France is famous in Western Europe for being one of the only EU countries where access to, uh, hentai comics, is legal and they're sold in newspaper stands.

If the French state cared about fighting sex-crimes on children they would fund taking care of the children they do "help", rather than catching criminals. Instead, this is what they do:

https://www.rfi.fr/en/france/20250502-french-child-welfare-s...

(at the very least they let it happen, but in practice they also hire people that will do this job at a very cheap wage because it provides access to vulnerable children)

Without fixing this FIRST, the only thing catching criminals will do, obviously, is make the situation of children worse. The French state fails this test.

The situation with French schools, both the immigrant situation AND the constant decline in teacher quality (for at least 3 decades now) show how much the state cares about children's future in general. Again, the state fails the test completely.

And I haven't even mentioned the refugee situation in Paris. Obviously that situation is producing a flood of child prostitution. Again, the state is showing itself unwilling to help children. Again, the French state is exposed as not doing shit to help children, or at the very least, they're totally ineffective.

So no, and sorry to state the obvious, but your suggestion is completely beside the point.

coumbaya 1 day ago|||
Most of what you said is may be true but not the part about hentai ? France does block, without asking a judge, most of the big hentai websites with a problematic catalog, and you can't sell those IRL either !
spwa4 1 day ago||
I actually saw this in a bookshop (more of a very big model newsstand, really) in Lille, about 4 years ago. At that time, it certainly was still there.
fyltr 1 day ago|||
I would love to take the time to inspect your answer more thoroughly as soon as I have the time, but your premise is wrong. Most CSAM creators are neither teachers nor coaches, but parents i). The French state is not some cynical entre-soi that protects child abusers who are on their payroll. In my personal experience, which, while it isn't generalizable does prove the existence of consequences, I've come across three teachers accused of incorrect behavior with children ii). All three disappeared from the schools within months.

i)> Research suggests that a significant proportion of child sexual abuse material (CSAM) is produced and distributed by parents who victimise their children. An online convenience sample of 150 adult survivors of CSAM found that, of those abused by a single perpetrator, 42% identified their biological or adoptive father or stepfather as the offender; and of those abused by multiple perpetrators, 67% identified their biological or adoptive parents or step-parents as the primary perpetrators (Canadian Centre for Child Protection (CCCP), 2017). https://bravehearts.org.au/research-lobbying/stats-facts/onl...

ii) the first one had us do sexual education at age 8 and was gone five weeks after he began, the second had been on the radar for racism and was gone two months after complaints of staring at girls skirts, the third, a sport teacher, disappeared at the end of the semester for systematically correcting girl's stances while squatting and such. In the two last cases, the schools were relatively big and rumors of worse offenses were around, but I don't know if those were true.

spwa4 1 day ago||
> i)> Research suggests that a significant proportion of child sexual abuse material (CSAM) is produced and distributed by parents who victimise their children. An online convenience ...

(blabla, point is it was parents)

So here is the actual link to the actual study your numbers come from: https://content.c3p.ca/pdfs/C3P_SurvivorsSurveyExecutiveSumm...

In case you seriously don't understand how you're misleading people: this is an organization that is FORBIDDEN by law to investigate cases of CSAM where the parents aren't involved. And CSAM is not their focus. Their focus is placing children.

In other words what have you proven with this study?

If you exclude all perpetrators except the category you want to accuse, then only exactly the people you want to blame are guilty. Proving all ravens are white by excluding any black ones, in other words.

The (wrong) summary study you linked to by the way, when it mentions non-family CSAM studies always has thousands to tens of thousands of cases, but when mentioning parental involvement they have 1 study with 150 examples. The other case of CSAM they mention in Canada is about "sextortion", ie. going further than just CSAM, but using CSAM to force a minor to do sexual acts. It happened exclusively at schools and talks about 23000 cases ...

Let me do the math with those numbers, even if I realize this is not a great way to compare and the numbers are not remotely complete, but let's use the numbers we have: 150 parents involved, 23000 = 0.6%. If that number can be an indication of the ratio, even with 500% error ...

Sometimes online people use these sorts of numbers as justification for that we should just totally stop investigation of biological parents in child welfare because even if you totally prevented ALL biological parent child abuse, you would have barely made a dent in child abuse as a whole. In fact there's studies claiming that because of the focus on biological (especially single female) parents child welfare agencies cause numbers of child abuse cases to go UP, not down.

Note: the study you pointed to clearly states that when it comes to single female parents, NOT A SINGLE ONE was even involved (not even unknowingly involved) in CSAM. Not one.

This is despite that being the main focus of C3P. Child abuse by single mothers is what they spend most of their attention on, how most children get placed, despite not being able to show a SINGLE case of it leading to CSAM.

So there's the problem: states force investigations away from actual child abuse. Here's how it works: Police is legally forced to refer child abuse cases to child welfare agencies, without investigation (ie. they CANNOT decide to investigate by themselves, unless there are other serious crimes). Child welfare agencies are explicitly forbidden from investigating schools, and especially forbidden from investigating the child welfare agencies themselves (despite reporters exposing a "prostitution ring" or the like inside child welfare agencies in every country every few years). You will have no difficulty finding stories of ex-"placed" children who were forced into prostitution, on facebook, tiktok, ... nor will you have problems finding reporters exposing child welfare prostitution with other government employees involved (e.g. Rotherham) regularly.

Another thing about child welfare agencies that get caught prostituting children they're supposed to protect: the numbers are absurd. Rotherham exposed that UK child welfare employees and city hall employees had organized and received payment for 1400 confirmed rapes. Claims that the total number was over 20000 are rife online. One might remark that ALL child sexual abuse cases in London in 10 years is less than 5000. That ONE case of child services sexual abuse made more victims than all other cases in the entire London area (15 million people) for 3 to 20 years COMBINED.

You know how the government refers to the perpetrators, by the way? They refer to child welfare employees and city hall employees by these words in all articles about it "Pakistani men" (and, of course, only about half were actual Pakistani, by the way. Especially in the city hall employees, no shortage of Brits. Also the police officers involved were British)

> The French state is not some cynical entre-soi that protects child abusers who are on their payroll

I've gone to school, not in France, but close enough to hear stories.

> All three disappeared from the schools within months.

Exactly. Well, they were mostly moved from one school to another, I take it? That's the case for the stories I heard. Note that you explicitly DID NOT say punished or persecuted, despite of course committing crimes. You don't even mention they were investigated at all. And they weren't.

One of the stories I heard was about a gym teacher having placed a camera in the women's showers by the way. He was caught, and indeed disappeared from school after a second incident. But ... what do you suppose happened to the videos? Nobody even went looking for them. What happened to all the videos of the ones who weren't caught?

Oh, and, three is a rather large number for one student to encounter, don't you think?

I hope you can at least agree there's a problem here. AND, that giving spies and legally-forbidden-to-investigate police officers access to private messages is very unlikely to help in those cases.

amarant 1 day ago||
I'm starting to think we need to make encryption a protected class, so that we can label speaking against it as hate speech.

Let's start putting some of these politicians in jail for being stupid.

petre 1 day ago|
How about let's not vote for stupid politicians?
M95D 5 hours ago||
They're all stupid.
skiing_crawling 1 day ago||
How will they know what's encrypted? Maybe I just like sending random sequences of bytes across the wire
sufficientsoup 1 day ago||
It doesn't even need to be random. What if you send an instance of a proprietary file format? Is the company required to share the spec and toolchain so that the govt can verify it (probably) isn't an encrypted message?
deeringc 1 day ago||
Exactly - or encrypted payloads hiding inside standard image file formats. Basically steganography. If all you want to send is a small encrypted text message, it should be possible to hide that in a large image (encoding in the LSB or whatever) in just a small percentage of pixels so that it doesn't fail statistical tests and is indistinguishable from real noise.
vkou 1 day ago||
I'm sure the judge will love your explanation.
tardedmeme 1 day ago||
In my home directory is a 4GB random file. I suggest you should do this too. Vary the filename to taste. Some suggestions: the name of any active drug market or cyber threat actor.
dorgo 1 day ago|||
I came about a Google subscription which includes 2TB of storage. I filled it with crypto noise (ok, Gemini did it for me). I couldn't let it be unused. Will have to delete it when the subscriptions runs out.
ZetsuBouKyo 1 day ago||
I remember a joke where a guy sent a joke to another via private message, and Xi Jinping laughed. It seems the government's mindset is the same everywhere.
nazcan 1 day ago||
I still don't understand the note that the companies can't decrypt the messages with e2e encryption. Isn't it as simple as a software update that says:

"If user = foo, then send the on device keys elsewhere"?

Or if those keys are part of a TPM, then a software update that just asks it to send in the decrypted messages?

Can judges not order this now, but can order decryption if the keys are stored centrally?

bsaul 1 day ago|
of course, nothing magically prevents the app from sending keys or decrypted content to a third party.

That's why if you're really serious about e2ee you have to install the app from source.

nazcan 1 day ago|||
Yeah, makes sense.

I wonder if for closed-source apps if governments can not just force the key collection the same way they would force decryption with centralized keys.

antiframe 1 day ago|||
I like to co-opt the expression: not your keys, not your privacy.
sublimefire 1 day ago|
Some people do not take no for an answer. This is bordering on absurd.

But on the other side what I miss is some explanation if forensic analysis helps here? Presumably the messages stay on a phone and you can recover them. If that is the case then it should be enough to fight the crime, i.e if you get a warrant to access the device then you can access messages, which I believe many would agree is fine.

More comments...