WhatsApp says India's new IT rules that ask for message tracing will end privacy for users
"According to WhatsApp, the traceability requirements in the Centre's new intermediary rules include criminal penalties for noncompliance"
According to WhatsApp, the traceability requirements in the Centre's new intermediary rules include criminal penalties for noncompliance. This means that new IT rules not only force it to break end-to-end encryption, which was designed to help users maintain privacy on the platform, but also make it easy to charge platforms in the country for non-compliance.
WhatsApp and the Government of India are once again at odds over the issue of traceability, which first surfaced in 2019. The Centre's new intermediary rules have brought the two parties to court this time. WhatsApp filed a legal complaint against the Centre on Tuesday in New Delhi, claiming that the new rules violate privacy rights by requiring the platform to break end-to-end encryption.
The earlier published IT rules give law enforcement agencies the authority to require platforms to trace the "first originator" of any message. End-to-end encryption is used by WhatsApp, and the new rules may force the messaging platform to break the encryption.
Apart from requiring traceability, the new IT rules published earlier this year threaten criminal penalties for platforms such as WhatsApp that fail to comply. The messaging platform tells India Today Tech that it had no choice but to seek the advice of the courts.
WhatsApp also provides examples of similar cases in which it has consistently opposed legal action that would force end-to-end encryption to be broken. In Brazil, the messaging platform is currently facing a similar issue, which is being heard by the Supreme Court of Brazil.
For those who are unaware, this is not the first time the Centre and WhatsApp have discussed traceability.
What exactly is end-to-end encryption?
Let us first define end-to-end encryption in the context of a platform like WhatsApp. The feature was created to ensure that a person sending a message to another person's message is not read by any third party, including the platform, in this case, WhatsApp. In other words, if you send a private message to a contact on the messaging platform, not even WhatsApp knows what it is.
WhatsApp first introduced end-to-end encryption on its messaging platform in 2016, and it has since expanded to include calls, messages, photos, videos, and even voice notes. The feature ensures that no one, including WhatsApp, reads messages sent to the intended recipient.
The new Intermediary Rules require WhatsApp to do the exact opposite of end-to-end encryption, which means that messages must be open to reveal who sent what to whom.
To be more specific, the Centre wants platforms to collect and store who said what and who shared what for messages exchanged on the platform each day. Because the messaging platform must store all user data, this opens the door to hacking attempts on user data.
Why can't traceability always find the original sender of a message?
WhatsApp emphasizes to India Today Tech that traceability will necessitate platforms collecting more data than they need solely for the purpose of turning it over to law enforcement agencies.
The company also discusses how traceability does not guarantee locating the originator of a specific message.
It correctly states that users of messaging platforms frequently see content on websites or social media platforms and then copy and paste it into chats. This means it would be impossible to understand the context in which it was first shared.
WhatsApp goes on to say that traceability cannot be imposed in any way that cannot be spoofed or altered. According to the platform, this could lead to new ways for users on the platform to be framed for things they did not say or do.
More importantly, if WhatsApp is required to collect such large amounts of user data, it becomes inherently less secure by opening up more avenues for hacking. Because the massive user data must be saved somewhere, the traceability also creates a situation in which the user data can be hacked.
The implementation of traceability for users on any platform will mean that the privacy and security of user data will fall short of current standards. End-to-end encryption has long been a benefit of WhatsApp that few other messaging apps can match. The Centre must recognize that mandating traceability undermines security features critical to individual privacy and cybersecurity.
Notably, many expert groups around the world have spoken out strongly against a traceability feature that is fundamentally incompatible with end-to-end encryption.
Also Read:
GOOGLE IO: 5 RECENT ANNOUNCEMENTS YOU MUST KNOW
COLLATERAL-FREE AND PAPERLESS “FONELOAN” IS A NEW DRIVE IN THE BANKING SECTOR IN NEPAL
DANPHE CARE: THE TELEHEALTH PLATFORM THAT’S PROVIDING REMOTE CONSULTING TO COVID-19 PATIENTS IN NEPAL
BROADBAND INTERNET CAPACITY TO BE ENHANCED IN QUAKE-AFFECTED DISTRICTS
PIAGGIO ONE ELECTRIC SCOOTER UNVEILED AHEAD OF GLOBAL DEBUT