End-to-End Encryption and “Going Dark”

Per Schneier on Security, a new paper from academics analyzes what's being called the third major round of the 'going dark' debate: government efforts to limit end-to-end encryption. Governments worldwide have proposed, and some enacted, laws restricting end-to-end encryption for law enforcement and national security. But the paper reveals a more complex picture: it identifies five distinct technical scenarios for how end-to-end encryption works in practice, showing that it's not the categorical blocker to lawful access that some assume. The paper also shows end-to-end encryption is woven throughout the modern tech stack—in secure web connections, remote access protocols, and zero trust architecture, which the U.S. and European Union now legally require. Restricting such encryption broadly would damage cybersecurity, commerce, and government operations. The researchers conclude that governments' claims for limiting effective encryption deserve serious skepticism.

Listen to this story

Hear this and more stories in a personalized audio briefing.

Open The Chonkerton