Re:France rejects backdoor mandate
by dataflow on Friday March 21, 2025 @07:05PM
(#43441655)
Maybe they don't think it's as likely as you think. Or maybe they think the time horizon is long enough that it is worth it. Whatever it is, I assure you they are not too stupid to realize this is a possibility. They just differ on either the degree of the risk, or on the value they get in return. In which case, logic dictates that if you believe the actual risk is higher than they would tolerate, to find a way to convince them of that.
[ Parent
| on HN ]
Re:France rejects backdoor mandate
by whatshisface on Friday March 21, 2025 @07:22PM
(#43441766)
That's a matter of facts rather than values. The "impossible promise" is that a private company can keep a kilobyte of data out of the hands of every spy agency on Earth for any length of time.
Why does this concern apply to the French intelligence agency but not, say, the code signing certificate for Whatsapp?
Re:France rejects backdoor mandate
by whatshisface on Friday March 21, 2025 @08:18PM
(#43442099)
On one level it does apply to certificates.
On another level, pushing a compromised update to every phone in Europe (to gain access equivalent to having a copy of the backdoor) would be noticed by the publisher, and the binary difference would quickly be found by security researchers.