What's this about?
The European Commission's ProtectEU strategy includes a "Roadmap on lawful and effective access to data", framed around 85% of criminal investigations relying on digital information. Reporting reads this as reviving mandated backdoors in encrypted communications.
What does "lawful access" actually require technically?
A way for authorities to read messages that are otherwise end-to-end encrypted. There is no version of this that only works for authorised parties: any mechanism that can decrypt on demand is a mechanism that exists, can be compelled, stolen or misused, and must be built into every client. That is why cryptographers treat "secure backdoor" as a contradiction rather than an engineering challenge, and why the phrase "security despite encryption" gets the reaction it does.
What's the community saying?
HN 370 points, 156 comments
- Weary recognition — the same debate returns every few years, in the EU, UK, US and Australia, and the rhetorical framing is the thing people flag first.
- The most substantive thread is about platform concentration: mandates are easy to enforce on a closed Apple/Google duopoly and much harder against general-purpose computers running software you chose.
- A careful commenter went looking for the actual text and could not find backdoors stated explicitly, before being pointed to the "lawful access to data" roadmap in the press release — worth noting that the inference is an inference.
- A related HN thread the same week: British respondents would, it turns out, quite like their private messages to stay private.