50 comments

[ 3.3 ms ] story [ 71.9 ms ] thread
This article incorrectly implies that Telegram is end-to-end encrypted, by putting it in the same line as WhatsApp and Signal.

Telegram doesn't even try to be end-to-end-encrypted by default. WhatsApp claims to be end-to-end-encrypted, but it's not open-source, Signal is end-to-end-encrypted.

Open source would not help without the reproducible builds of Signal (I wonder who check them on each release?). And only builds like Molly include no binary blobs of Google [1], which could IMHO at least be used to extract some metadata. Leaving the OS still as a risk, even for Molly or Matrix clients. Even with transparency around linked devices, I would believe that few people would notice silently linked devices. Simplest thing is I guess social engineering which happened in a coordinated attack on Signal messagers of German politicians recently (I guess there should be an official signal app version not supporting linked devices for such people) [2].

[1] https://news.ycombinator.com/item?id=46081855 [2] https://www.politico.eu/article/hackers-attack-phone-of-germ...

I find it fascinating that a country with citizens that are typically willing to protest in the streets at the drop of a hat don't seem to care. Is it that they aren't technically literate?
> Mass surveillance, of course, isn’t what the delegation is proposing. The fear isn’t that a French investigator will read every WhatsApp message.

French investigators won't care about every WhatsApp message. But they definitely will slurp them all up, process them all with AI, and read them whenever they have an interest. And they will deny they are doing this as they do this.

Lets pretend this happens, I am curious how it would work.

So a person in Canada messages someone in France who's WhatsApp is not encrypted. But the message from Canada is encrypted. Will the person in Canada's message have to be sent unencrypted ? Or will WhatsApp Canada need to allow France to break Canada's encryption ?

Personally I think it would be easier for these apps to ban people in France from using their service.

Some people do not take no for an answer. This is bordering on absurd.

But on the other side what I miss is some explanation if forensic analysis helps here? Presumably the messages stay on a phone and you can recover them. If that is the case then it should be enough to fight the crime, i.e if you get a warrant to access the device then you can access messages, which I believe many would agree is fine.

To make the link with another very successful article on HN today: who is Franced rule by yet? By cyber-libertarians right?
Let’s start with the smartphones of politicians.
I'm starting to think we need to make encryption a protected class, so that we can label speaking against it as hate speech.

Let's start putting some of these politicians in jail for being stupid.

How about let's not vote for stupid politicians?
They're all stupid.
"The excessive increase of anything often causes a reaction in the opposite direction; and this is the case with freedom, which in a democracy often descends into anarchy... The excessive liberty of the individual in a democracy eventually leads to a desire for authoritarian rule, and out of that desire, the tyrant arises." - Plato's Republic
No fair, we didn't even get the fun anarchy part before skipping right on to tyrrany!
Oh look, an aristocrat patron sponsored is big into aristocracy, what a surprise.
Seems to me we're going to have to let the anti-encryption mob have their way until things go wrong—bigtime. No amount of expert advice will convince them until they witness firsthand the negative consequences of weakening encryption.

It's only afterwards and as a consequence some highly newsworthy disasters occur such as a child abduction or political sex scandal involving a high profile politician come to light that the lay public will get the message that weak encryption is effectively no encryption.

In the meantime criminals will be early adopters of more sophisticated messaging such as steganography.

In most cases I think the revelation of a scandal involving a high-profile politician would be a good thing. (That is, better than it remaining secret.)
> until they witness firsthand the negative consequences of weakening encryption.

They won't be affected.

The hitherto invisible but very real wall between social classes is just going to become more visible for "First World" civilians the way it's been in "lesser" countries for decades already.

Actual "criminals" have always been able to get around all the restrictions ever put in place since the dawn of civilization, it's just the common folk that get trodded on and kept in their place.

To be fair, the EU governments led the way to an unencrypted future with TETRA and the broken TEA1 encryption scheme. They're just giving back freedom and openness to the people now. /s
I don't think I've ever seen a consequence (from a legislator's POV.)

If someone does a high-profile enough hack, that can only mean more laws and increased police power to target it.

I think there’s no turning back in this kind of laws. What has been lost is lost. In France a lot of public databases were leaked recently. It cannot be undone
How will they know what's encrypted? Maybe I just like sending random sequences of bytes across the wire
The world needs frontiers or stuff like this is the natural state.
I still don't understand the note that the companies can't decrypt the messages with e2e encryption. Isn't it as simple as a software update that says:

"If user = foo, then send the on device keys elsewhere"?

Or if those keys are part of a TPM, then a software update that just asks it to send in the decrypted messages?

Can judges not order this now, but can order decryption if the keys are stored centrally?

of course, nothing magically prevents the app from sending keys or decrypted content to a third party.

That's why if you're really serious about e2ee you have to install the app from source.

But not for French politicians and military, am I right?

Encryption for me not for thee?

Time to teach all your friends how to use a one-time pad. Could be a fun hobby for those with the right inclination.
It's not clear that this would be a legal workaround. Even texting in rare languages, like those in Egyptian hieroglyphs, or perhaps Klingon, might warrant a knock on your door.
The big problem here is that Veracrypt development is done there if I'm not mistaken. Probably time to get back to trusted old TrueCrypt.
I'll repeat this over and over:

Most EU politicians are aware of needing to lead from positions of deep unpopularity for the next 10-20 years, they're just setting the stage to have the tools to suppress dissent at their disposal. After encryption, my bet is on reduced rights to protest (see UK wanting to ban protests that repeatedly "cause disruption").

EU politicians are still more popular than Russian politicians.
Yes, all the Mertz, Macron, Starmer and unelected Brussels ones have officially about 10-20% approval rating.

This is in fact mind boggling and I am still wondering how it is even possible.

My guess is most of those positive approval are boomers who watch TV and are less impacted by their policies because they own their house and receive their retirements, they are highly incentivised to keep the train going. Or people who directly benefit from their policies.

What I still can't explain is Trump can still maintain a much higher approval ratings with in a country with similar demographic profile, even after literally doing the exact opposite than he promised.

So my guess is the support for the current system and the people running it in Europe is probably less than 5% among the population who will still be around in 10-20 years.

So the current political system is literally levitating on a cloud of old people which is disappearing at a rate of about 10% per year. So one way or another this is gonna get ugly.

I remember a joke where a guy sent a joke to another via private message, and Xi Jinping laughed. It seems the government's mindset is the same everywhere.
With the first link, the chain is forged.

We're into way many links already.

Isn't this the country that beheaded their rulers?

A public ballot should be held for this.

Governments act as kings.

Liberté, Égalité, Fraternité.. et Surveillance-té
So in France you will not be able to send your friend gibberish text that only you and your friend understand. Will they also ban the ability to make new languages that only you and your friends understand. Will they also ban whispering?
The article is a lot more nuanced than the title or what most folks are discussing in comments. France has politicians voting in both directions and thus far the "keep encryption and enshrine it in law" side is ahead slightly.

> Senator Olivier Cadic, of the Centrist Union, secured an amendment to a separate bill on critical infrastructure resilience and cybersecurity that would do the opposite, writing encryption protection into French law and prohibiting any obligation on messaging services to install backdoors. The Senate adopted it in March 2025.