Unfortunately force and power usually only work one way. If they can't succeed in decryption, they'll succeed in threatening and/or scaring the people into doing it for them.

>>It is easy to task authorities with intercept and decryption duties; actually doing it successfully is another matter entirely. Mathematics works both ways, friends.

Actually if Apple, Goog, FB etc are forced to surrender the key--at the penalty of being excluded from 1.x billion people in India--math works only one way...

they can't surrender keys they don't have (e2e). the only issue is that they may be forced to do a key change. one way around this would be to show a prominent notice if your peer changed keys, which would make it immediately obvious what was going on.

> Actually if Apple, Goog, FB etc are forced to surrender the key--at the penalty of being excluded from 1.x billion people in India--math works only one way...

They did that with Blackberry few years ago

The idea that showing a warning makes it immediately obvious what is going on is ridiculous.

It would take a large-scale public education campaign to teach people what it means when they see a warning message that reads "Peer key changed. Are you sure you want to proceed?"

If you need to be convinced, go ask your mom or dad whether it's immediately obvious what is going on when they see an insecure connection warning in their web browser. In my experience everyone just clicks through to "proceed anyway" without comprehending it at all.

That’s why most browsers now make this difficult to do.

If India wants and if they can do it (maybe trade agreements prohibit them...not sure,) there's no way around. You want to do business in India? Yes? OK, then should have the key and must give it to India's police. Otherwise a ban on your business in India, $billion fines and arrests warrants for entire line of execs.

Apple has great hopes for India https://www.msn.com/en-us/finance/companies/its-been-a-rout-...

They needn't decrypt, only negligible population use End to End encryption. They can do mass surveillance with the support of ISP; may be some of the ISP's objected to their surveillance requests & hence blanket permission to do so.

I think this is specifically aimed at elections, data from ISP's, set top boxes provide enough data to determine political affiliations such as whether you watch NDTV or Republic.