Controversy of End-to-End Encryption
Martin Průcha, 04. 09. 2024
Controversy of End-to-End Encryption
End-to-end encryption (E2EE) ensures that your communication is secured. It prevents third parties from accessing your data when you send it to someone. The data is encrypted on your device, and it can be decrypted only by the receiver.
Should companies use it? Are our messages safe when texting to a friend on Facebook, for example?
Apple, WhatsApp, Facebook. three giants that have been in the headlines regarding their (previously non) existing E2EE. All these companies (and many more) used to have complete access to all messages sent through them. Recently, they rolled out E2EE, and the controversy began.
Pros and Cons
At first glance, E2EE seems like the obvious choice. We don’t want third parties to read our private conversations, do we? But, as always, nothing is as simple as it seems.
Pros of E2EE:
- High level of security for messages, protecting privacy.
- Ensures that messages cannot be altered in transit without detection.
- Helps companies comply with privacy and security laws.
- Service providers are not responsible for user content, reducing legal and ethical liability.
Cons of E2EE:
- Provides criminals with a “safe space” to communicate.
- Platforms (or even governments) cannot trace the origins of fake news or other harmful content.
- Complex key management can lead to vulnerabilities or loss of access if keys are lost. Lost devices or keys can result in irretrievable data, unlike standard encryption methods.
- E2EE may interfere with features requiring data access, such as content scanning or cloud-based functionality.
- Implementation can be expensive and technically demanding.
E2EE and Politics
E2EE is a global topic of discussion. Governments want tech companies to create ways to bypass E2EE for national security reasons. The EU is considering a law that would require scanning encrypted messages and files to fight child abuse. Opinions in the EU are divided: some want scanning only with court approval, while others want it mandatory for all uploads. These rules could weaken encryption and impact business security. Critics point out that the law would not apply to government officials, raising concerns about the entire proposal.
Messaging apps like Signal and privacy experts argue that implementing this law could break encryption and create security issues. Some apps might leave the EU if the rules pass, as they can’t guarantee secure communication. Critics urge the EU to protect end-to-end encryption to avoid mass surveillance and safeguard privacy.
Telegram CEO at Court
The controversy over E2EE recently took a not-so-unexpected turn. The Telegram app is known for its super-secure messaging using E2EE. However, due to its use in illegal activities, the French government decided to take action.
Telegram CEO Pavel Durov (who has French citizenship) was charged with allowing criminal activities, such as sharing child sexual abuse images and calls for violence. He avoided jail by posting €5 million bail but must stay in France and report to the police twice a week.
The arrest has raised concerns about Telegram’s role in moderating content and sparked debates over free speech, government censorship, and the responsibilities of tech companies. Telegram claims it follows EU laws and that blaming the platform or its owner for misuse is unfair.
Balancing Privacy and Security
In summary, end-to-end encryption offers robust protection for our messages, ensuring privacy and security. However, it also presents challenges, including potential misuse and difficulties in managing data. As debates continue between tech companies and governments, finding the right balance between security and accessibility will remain a critical and ongoing discussion.
Author: Kristýna Supradnyan
Images: https://leonardo.ai/
Sources and References:
More posts
SecurityNIS-2: it doesn’t have to be such a mess when one looks at the site
Martin Průcha04. 09. 2024
