6 ms·
I haven't tried reading the text of The Act, most of the press about it focuses on E2EE-type messaging systems. So presumably if this passes, Signal would have
by mawise 5y ago
I haven't tried reading the text of The Act, most of the press about it focuses on E2EE-type messaging systems. So presumably if this passes, Signal would have to move offshore or something? (for example)
But what about HTTPS certificates, would The Act have any effect on them? Would there be any legal issues with (for example) running your own Matrix server?
And what about hosting providers (instead of platforms). Would Amazon be compelled to decrypt HTTPS traffic en-mass that's routed to their machines?
- CameronNemo 5y agoSignal has threatened to exit the US market in the past, IIRC.
- nomendos 5y agoSignal would either have to go to China or Russia (where it would dance to their tune) or shut down or quietly comply. It would be "NoSignal" from this Act on.
- avh02 5y agobecause the only countries in existence are USA, China, and Russia.
- drdaeman 5y agoRussia already has a similar law since 2016, although it's applied selectively to whomever they please rather than to everyone by default. And the guise of the day is terrorism, not child abuse. When you guys were surprised about Room 641A, Russia already had warrantless surveillance boxes mandatory for every ISP by law. I've no clue about China, but I'd be very surprised if they're not even worse in this regard.
- pyuser583 5y agoI very much doubt it. Law enforcement doesn’t seem too concerned about regular old HTTPS. I wonder why?
- wmf 5y agoHTTPS is not end-to-end encrypted (it kinda would be if we used P2P but we don't) so you can subpoena the server.
- CogitoCogito 5y ago> HTTPS is not end-to-end encrypted (it kinda would be if we used P2P but we don't) so you can subpoena the server. How is https communication not end to end encrypted? And what’s the difference between subpoenaing a server vs an end user? The server is just another person/organization. Edit: Re-reading this I guess you mean that having a centra server acting as a middle man would probably not be end to end which I agree with. I thought you meant user <—-> server wasn’t end to end.
- xeromal 5y agoI think they just mean they can just tell the company who owns the server to give them the data.
- woodruffw 5y agoA typical example is a chat application served over HTTPS: your communication with the server is encrypted, but the messages sent between you and your friends are passed through the server in the clear (through databases, logging, caching layers, etc.).
- Andrew_nenakhov 5y agoIt is absolutely end-to-end encrypted. However, one of the ends is usually a server.
- pyuser583 5y agoI guess it depends on which end we are talking about. Generally, “end to end encryption” refers to client to client encryption, where the sever routes data but can’t read it.
- 5y ago