Developers of apps that use end-to-end encryption to protect private communications could be considered hostile actors in the UK. <-- HTTPS does this. What about secure sites like baking sites that encrypt end-to-end? Old farts making laws about things they know nothing about.

▲

SirHumphrey 4 days ago | parent | next [-]

>>> Old farts making laws about things they know nothing about.

We should probably stop saying and believing that. This is basically the UK government making a deal to the developers they cannot refuse: cooperate (install backdoors) or get prosecuted. The French tried to do something similar not so long ago.

A decade ago politicians genuinely didn’t know much about the internet so most of the laws were terribly ill informed good ideas. The new sweep of internet legislation like chat control, age verification and banning of vpns are much more dangerous because those pushing know exactly what they are doing.

	▲	hs586 4 days ago \| parent [-]
		Exactly this. I do not think this is a case of Hanlon's razor. Assuming incompetence or stupidity of the government officials trying to push for is very dangerous. (Great username, btw, SirHumphrey)

▲

arccy 4 days ago | parent | prev | next [-]

baking sites, the most secure source of cookies

▲

CommanderData 4 days ago | parent | prev | next [-]

Why worry about E2E encryption, in theory just need a cert issued from a vast array of CAs or intermediates. Which I wouldn't be suprised they possess the ability through some type of secret warrant, heck even private keys.

▲

JoshTriplett 4 days ago | parent [-]

> Why worry about E2E encryption, in theory just need a cert issued from a vast array of CAs or intermediates.

Certificate Transparency thankfully means this is a tool a government could only use once if at all, and then they've burned an entire CA.

▲

CommanderData 4 days ago | parent [-]

Isn't certificate transparency opt-in, so any trusted CA could be a potential attack route.

	▲	JoshTriplett 4 days ago \| parent [-]
		Browsers now require it to consider a certificate valid. Firefox, Chrome, and Safari all require a certificate to include proof of being logged in CT logs.

▲

neilalexander 4 days ago | parent | prev [-]

> Old farts making laws about things they know nothing about.

Who's going to stop them?

	▲	ykonstant 4 days ago \| parent [-]
		Young poops?