What it Says:
UK security officials demanded that Apple create a backdoor allowing them to retrieve all the content any Apple user worldwide has uploaded to iCloud:
The secret order -- issued last month -- requires blanket capability to view encrypted material, not merely assistance in cracking a specific account.
As a result of the order, Apple is likely to stop offering encrypted storage in the UK -- however, that would not fulfill the UK’s demand for backdoor access in other countries.
What to Communicate:
This order is the latest salvo in the tug-of-war over encryption:
Device manufacturers: Now compete on security features & argue that any encryption backdoors would lead to systemic privacy breakdowns:
“There’s no way to build a backdoor that only the ‘good guys’ can use,” stated the Signal Foundation’s Meredith Whittaker.
Authorities: Argue that encryption allows bad actors (terrorists, child abusers, drug dealers) to “go dark” -- they want selective backdoors:
“End-to-end encryption cannot be allowed to hamper efforts to catch perpetrators of the most serious crimes,” stated a UK govt spokesperson.
Additional from IANS Faculty Jake Williams:
“End-to-end encryption is worth fighting for, both for privacy and enterprise security. If a government can compromise end-to-end encryption for file scanning, they can use the same techniques to manipulate data in transit and use it for exploitation. Once end-to-end encryption is compromised in the UK, repressive regimes will use this to compel more access to communications in their jurisdictions.”
Relevant Document [Subscription might be required]:
NIST-Compliant Encryption Policy Template
Credit: IANS Executive Communications: Friday, February 7
