Encryption ban proposal in the United Kingdom

Last updated

The UK encryption ban is a pledge by former British prime minister David Cameron to ban online messaging applications that offer end-to-end encryption, such as WhatsApp, iMessage, and Snapchat, [1] [2] [3] [4] under a nationwide surveillance plan. [5] [6] [7] Cameron's proposal was in response to the services which allow users to communicate without providing the UK security services access to their messages, [5] which in turn could allegedly allow suspected terrorists a safe means of communication. [8]

Contents

Proposal

On 15 January 2015, David Cameron asked American president Barack Obama to increase pressure on American Internet companies to work more closely with British intelligence agencies, in order to deny potential terrorists a "safe space" to communicate, [9] as well as seeking co-operation to implement tighter surveillance controls. [10] Under new proposals, messaging apps will have to either add a backdoor to their programs, or risk a potential ban within the UK. [11] To justify the proposal to ban encryption, David Cameron claims that "In our country, do we want to allow a means of communication between people, which even in extremis, with a signed warrant from the home secretary personally, that we cannot read?" [12] In defending surveillance of Internet messaging, Cameron pointed out that the British state already possessed the legal ability to read people's private letters and to surveil their private phone calls.

In July 2016, newly appointed home secretary Amber Rudd confirmed the proposed Investigatory Powers Bill would grant any Secretary of State the powers to force communication service providers to remove or disable end-to-end encryption. [13]

Criticism

The UK's Information Commissioner Christopher Graham criticized the plans by saying "We must avoid knee-jerk reactions. In particular, I am concerned about any compromising of effective encryption for consumers of online services." [14] The ISPA claims that the proposal risks "undermining the UK's status as a good and safe place to do business". [14] While David Cameron had also claimed that app providers have "a social responsibility to fight the battle against terrorism", the founder of Lavabit had also criticized the proposals, saying the introduction of backdoors would leave systems more vulnerable. [15] [16]

Resultant legislation

The resulting legislation was the Investigatory Powers Act 2016 (nicknamed the Snoopers' Charter) which comprehensively sets out and in limited respects expands the electronic surveillance powers of the UK Intelligence Community and police. It also aims to improve the safeguards on the exercise of those powers. [17]

See also

Related Research Articles

GCHQ British signals intelligence agency

Government Communications Headquarters, commonly known as GCHQ, is an intelligence and security organisation responsible for providing signals intelligence (SIGINT) and information assurance to the government and armed forces of the United Kingdom. Based in "The Doughnut" in the suburbs of Cheltenham, GCHQ is the responsibility of the country's Secretary of State for Foreign and Commonwealth Affairs, but it is not a part of the Foreign Office and its Director ranks as a Permanent Secretary.

Regulation of Investigatory Powers Act 2000 United Kingdom legislation

The Regulation of Investigatory Powers Act 2000 (c.23) is an Act of the Parliament of the United Kingdom, regulating the powers of public bodies to carry out surveillance and investigation, and covering the interception of communications. It was introduced by the Tony Blair Labour government ostensibly to take account of technological change such as the growth of the Internet and strong encryption.

Clipper chip Encryption device promoted by the NSA in the 1990s

The Clipper chip was a chipset that was developed and promoted by the United States National Security Agency (NSA) as an encryption device that secured "voice and data messages" with a built-in backdoor that was intended to "allow Federal, State, and local law enforcement officials the ability to decode intercepted voice and data transmissions." It was intended to be adopted by telecommunications companies for voice transmission. Introduced in 1993, it was entirely defunct by 1996.

End-to-end encryption (E2EE) is a system of communication where only the communicating users can read the messages. In principle, it prevents potential eavesdroppers – including telecom providers, Internet providers, and even the provider of the communication service – from being able to access the cryptographic keys needed to decrypt the conversation.

The Wilson Doctrine is a convention in the United Kingdom that restricts the police and intelligence services from tapping the telephones of members of the House of Commons and House of Lords. It was introduced in 1966 and named after Harold Wilson, the Labour Prime Minister who established the rule. Since it was established, the development of new forms of communication, such as mobile phones and email, has led to extensions of the doctrine. However, it was never extended to cover members of the new devolved legislatures.

Investigatory Powers Tribunal

In the United Kingdom, the Investigatory Powers Tribunal (IPT) is a judicial body, independent of the British government, which hears complaints about surveillance by public bodies—in fact, "the only Tribunal to whom complaints about the Intelligence Services can be directed".

WhatsApp Messaging and VoIP service by Facebook

WhatsApp Messenger, or simply WhatsApp, is an American freeware, cross-platform centralized messaging and voice-over-IP (VoIP) service owned by Facebook, Inc. It allows users to send text messages and voice messages, make voice and video calls, and share images, documents, user locations, and other content. WhatsApp's client application runs on mobile devices but is also accessible from desktop computers, as long as the user's mobile device remains connected to the Internet while they use the desktop app. The service requires a cellular mobile telephone number to sign up. In January 2018, WhatsApp released a standalone business app targeted at small business owners, called WhatsApp Business, to allow companies to communicate with customers who use the standard WhatsApp client.

The Draft Communications Data Bill was draft legislation proposed by then Home Secretary Theresa May in the United Kingdom which would require Internet service providers and mobile phone companies to maintain records of each user's internet browsing activity, email correspondence, voice calls, internet gaming, and mobile phone messaging services and store the records for 12 months. Retention of email and telephone contact data for this time is already required by the Data Retention Regulations 2014. The anticipated cost was £1.8 billion.

Lavabit is an open-source encrypted webmail service, founded in 2004. The service suspended its operations on August 8, 2013 after the U.S. Federal Government ordered it to turn over its Secure Sockets Layer (SSL) private keys, in order to allow the government to spy on Edward Snowden's email.

Bullrun (decryption program)

Bullrun is a clandestine, highly classified program to crack encryption of online communications and data, which is run by the United States National Security Agency (NSA). The British Government Communications Headquarters (GCHQ) has a similar program codenamed Edgehill. According to the BULLRUN classification guide published by The Guardian, the program uses multiple methods including computer network exploitation, interdiction, industry relationships, collaboration with other intelligence community entities, and advanced mathematical techniques.

Mass surveillance in the United Kingdom Overview of mass surveillance in the United Kingdom

The use of electronic surveillance by the United Kingdom grew from the development of signal intelligence and pioneering code breaking during World War II. In the post-war period, the Government Communications Headquarters (GCHQ) was formed and participated in programmes such as the Five Eyes collaboration of English-speaking nations. This focused on intercepting electronic communications, with substantial increases in surveillance capabilities over time. A series of media reports in 2013 revealed bulk collection and surveillance capabilities, including collection and sharing collaborations between GCHQ and the United States' National Security Agency. These were commonly described by the media and civil liberties groups as mass surveillance. Similar capabilities exist in other western European countries, such as France.

Wickr is an American software company based in New York City. The company is best known for its instant messenger application of the same name.

Telegram (software) Cross-platform instant messenging service

Telegram is a free and open source, cross-platform, cloud-based instant messaging (IM) software. This service also provides end-to-end encrypted video calling, VoIP, file sharing and several other features. It was launched for iOS on 14 August 2013 and Android in October 2013. The servers of Telegram are distributed worldwide to decrease data load with five data centers in different regions, while the operational center is based in Dubai in the United Arab Emirates. Various client apps are available for desktop and mobile platforms including official apps for Android, iOS, Windows, macOS and Linux. There are also two official Telegram web twin apps – WebK and WebZ – and numerous unofficial clients that make use of Telegram's protocol. All of Telegram's official components are open source, with the exception of the server which is closed-sourced and proprietary.

Mass surveillance in Australia takes place in several network media including telephone, internet, and other communications networks, financial systems, vehicle and transit networks, international travel, utilities, and government schemes and services including those asking citizens to report on themselves or other citizens.

Crypto Wars

The Crypto Wars is an unofficial name for the U.S. and allied governments' attempts to limit the public's and foreign nations' access to cryptography strong enough to resist decryption by national intelligence agencies.

Wire Swiss GmbH is a software company,with headquarters in Zug, Switzerland. Its development center is in Berlin, Germany. The company is best known for its messaging application called Wire.

Investigatory Powers Act 2016 United Kingdom legislation

The Investigatory Powers Act 2016 is an Act of the Parliament of the United Kingdom that has been passed by both Houses of Parliament, and Queen Elizabeth II signified her royal assent to the Investigatory Powers Act 2016 on 29 November 2016 Its different parts came into force on various dates from 30 December 2016. The Act comprehensively sets out and in limited respects expands the electronic surveillance powers of the British intelligence agencies and police. It also aims to improve the safeguards on the exercise of those powers.

Wire is an encrypted communication and collaboration app created by Wire Swiss. It is available for iOS, Android, Windows, macOS, Linux, and web browsers such as Firefox. Wire offers a collaboration suite featuring messenger, voice calls, video calls, conference calls, file-sharing, and external collaboration –all protected by a secure end-to-end-encryption. Wire offers three solutions built on its security technology: Wire Pro –which offers Wire's collaboration feature for businesses, Wire Enterprise –includes Wire Pro capabilities with added features for large-scale or regulated organizations, and Wire Red –the on-demand crisis collaboration suite. They also offer Wire Personal, which is a secure messaging app for personal use.

The Special Envoy on Intelligence and Law Enforcement Data Sharing is a British creation of the diplomatic corps at Cabinet level to report on, and facilitate dialogue between the executive branch of government and technology firms, often global in nature, that provide service in the internet realm.

Reception and criticism of WhatsApp security and privacy features Reception and criticism of security and privacy features in the WhatsApp messaging service

This article provides a detailed historic account of the reception and criticism of security and privacy features in the WhatsApp messaging service.

References

  1. Ian Morris. "WhatsApp And Snapchat Could Be Banned In The U.K. After Charlie Hebdo Murders". forbes. Retrieved 16 January 2015.
  2. Thomas Tamblyn. "David Cameron Wants To Ban Snapchat". Huffington Post. Retrieved 16 January 2015.
  3. Andrew Griffin. "WhatsApp and iMessage could be banned under new surveillance plans". Independent. Retrieved 16 January 2015.
  4. Paris Cowan. "UK PM wants to ban encrypted comms". itnews. Retrieved 16 January 2015.
  5. 1 2 Zach Miners. "UK prime minister suggests banning encrypted apps like WhatsApp, iMessage". PC World. Retrieved 15 January 2015.
  6. Tom Warren. "UK government could ban encrypted communications with new surveillance powers". The Verge. Retrieved 16 January 2015.
  7. Nicholas Watt. "David Cameron pledges anti-terror law for internet after Paris attacks". The Guardian. Retrieved 16 January 2015.
  8. Jane Wakefield. "Can the government ban encryption?". BBC News. Retrieved 15 January 2015.
  9. Nicholas Watt. "David Cameron seeks cooperation of US president over encryption crackdown". The Guardian. Retrieved 16 January 2015.
  10. Neil McAllister. "The Register" . Retrieved 17 January 2015.
  11. David Kravets. "UK prime minister wants backdoors into messaging apps or he'll ban them". arstechnica. Retrieved 16 January 2015.
  12. Steve Ranger. "Is banning encryption a crazy plan or an absolute necessity? The reality is much more complicated than that". ZDnet. Retrieved 17 January 2015.
  13. J Martin, Alexander (14 July 2016). "UK gov says new Home Sec will have powers to ban end-to-end encryption" . Retrieved 15 July 2016.
  14. 1 2 Ernie Smith. "After U.K. prime minister takes aim at encrypted messages, critics speak out". associationsnow. Retrieved 17 January 2015.
  15. Dominic Rushe. "Lavabit founder condemns David Cameron's 'insane' plan to ban encryption". The Guardian. Retrieved 17 January 2015.
  16. Danvers Baillieu. "Why David Cameron's crusade against encryption could backfire on business". cityam. Retrieved 17 January 2015.
  17. Travis, Alan (2015-11-04). "Investigatory powers bill: the key points". The Guardian. ISSN   0261-3077 . Retrieved 2020-11-01.