3 ms·
This is a risky clause: > R5-32-5 An RCS client having E2EE enabled shall implement techniques to detect suspicious messages or conversations.
by g-b-r 2y ago
This is a risky clause:
> R5-32-5 An RCS client having E2EE enabled shall implement techniques to detect suspicious messages or conversations.
- kelnos 2y agoSounds like the standard wants phone RCS apps to do CSAM scanning as well as general analysis to see if the encrypted messages are about criminal activity. Not great.
- jeroenhd 2y agoSounds to me like it's doing spam/phishing/virus scans on-device because cloud servers can't.
- stephen_g 2y agoPotentially, but it’s fine as long as it’s done on the device and only notifies the user. Like ‘This might be spam, are you sure you want to view it’ or ‘This message might contain nudity’ if people care about enabling that kind of filter. As long as it never will call out to any external server it doesn’t break the security.
- g-b-r 2y agoPotentially indeed, that's why I said "risky". It - depends on how the clients want to implement it (it's not unthinkable that some might choose a "more effective" remote scanning) - it makes it a lot harder to make a client, although Bayesian filters should be enough