3 ms·
The "best practices by a committee they control" requirement which is carte blanche. They could easily set it to considering "key escrow" or "master key" backdo
by Nasrudith 6y ago
The "best practices by a committee they control" requirement which is carte blanche. They could easily set it to considering "key escrow" or "master key" backdoors.
- voxic11 6y agoYeah I think that is the big question that will need to be answered. Would failing to implement such a key escrow scheme qualify for protection under the clause: > "(C) fails to take an action that would otherwise undermine the ability of the provider to offer full end-to-end encrypted messaging services, device encryption, or other encryption services.” My guess is no since even with a key escrow scheme the messages can still be encrypted end to end. Its just that there is another party which may be able to decrypt it later.
- Spivak 6y agoBut the worst thing that happens if you fail to implement the best practices is that you lose section 230 protections. If you're and E2E messaging app or the author of device encryption software you don't need section 230 protections to begin with.
- ghastmaster 6y agoNot according to the current text of the bill. The EFF post is outdated I think. The commission no longer has teeth. This bill will probably die.