Slashdot Mirror
European Parliament Committee Endorses End-To-End Encryption (tomshardware.com)
The civil liberties committee of the European Parliament has released a draft proposal "in direct contrast to the increasingly loud voices around the world to introduce regulations or weaken encryption," according to an anonymous Slashdot reader. Tom's Hardware reports:
The draft recommends a regulation that will enforce end-to-end encryption on all communications to protect European Union citizens' fundamental privacy rights. The committee also recommended a ban on backdoors. Article 7 of the E.U.'s Charter of Fundamental Rights says that E.U. citizens have a right to personal privacy, as well as privacy in their family life and at home. According to the EP committee, the privacy of communications between individuals is also an important dimension of this right...
We've lately seen some EU member states push for increased surveillance and even backdoors in encrypted communications, so there seems to be some conflict here between what the European Parliament institutional bodies may want and what some member states do. However, if this proposal for the new Regulation on Privacy and Electronic Communications passes, it should significantly increase the privacy of E.U. citizens' communications, and it won't be so easy to roll back the changes to add backdoors in the future.
Security researcher Lukasz Olejnik says "the fact that policy is seriously considering these kind of aspects is unprecedented."
We've lately seen some EU member states push for increased surveillance and even backdoors in encrypted communications, so there seems to be some conflict here between what the European Parliament institutional bodies may want and what some member states do. However, if this proposal for the new Regulation on Privacy and Electronic Communications passes, it should significantly increase the privacy of E.U. citizens' communications, and it won't be so easy to roll back the changes to add backdoors in the future.
Security researcher Lukasz Olejnik says "the fact that policy is seriously considering these kind of aspects is unprecedented."
Obviously they didn't think of the children though. My next proposal with be called "Think of the Children" and will require full Internet histories of everyone to be collected and stored in perpetuity.
Isn't it amazing how the EU time and time again installs regulation that benefits the people who live there, even if that means going against companies best interests? And still many inhabitants of the EU think they don't benefit from it (although those numbers are going down thanks to Brexit).
-- Cheers!
The fact that the UK is out of the EU now, is probably the reason this could happen.
Yes, I'm left. You have a problem with that?
The UK isn't out of the EU yet. It will most likely remain a member for about two more years.
If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
True, but right now even if the UK were to complain about this resolution they would be ignored.
They are not out yet, but they have lost their voice already.
This may sound good on the surface on it, but it may have unintended consequences.
For example, can you still offer unencrypted web sites at all under this regulation? If you can't, doesn't that mean that every web site may have to register with a certificate authority?
Conversely, in order to comply simultaneously with this regulation and hate speech and libel laws, wouldn't web sites have to require more identification and authentication?
And what's the need for such a regulation anyway? All governments need to do is not to refrain from making cryptography illegal. Mandating cryptography seems as much of an unwise overreach as prohibiting it.
I don't understand why the summary is saying that the parliament demands end-to-end encryption be "enforced" while the title says "endorsed". This draft bill basically says that when you are not already providing communication over a secure channel, you should protect the users by encryption at their ends, using a sufficiently up-to-date method. Of course this is very vague on the technical requirements (hence enforceability), and I expect a lot resistance from the businesses if this part is going into the final act as it is now.
The real gem, though, is the provision against Member States deliberately weakening security. This is not legislative meddling in tech (which is problematic even if good-intentioned), but a direct legislative safeguard against the crazy state of political atmosphere that is on the verge of cyberauthoritarian dystopia, as it stands now.
Hear hear, honourable members!
For US Citizens, the gravity of this situation would be translated thusly:
The House subcommittee on Civil Liberties has accepted a proposal written by the ACLU and EFF advocating End-to-End Encryption.
That's it.
It hasn't been submitted to the house as a bill, it isn't making the rounds to garner legislative support, it simply exists as a proposal, and in doing so has made the news.
There is a current trend in some EU countries that want to violate the basic rights granted by their their respective constitutions or bill of rights. Rights that are supposed to apply to all humans or natural persons and not only to citizens. So I found the wording to be peculiar, because in fact the paper refers at one point not to "everyone" or "all individuals" but to "citizens" in the text proposed by the commission. In the amendment part however the citizens part is replaced with all individuals. You can look it up in this source on page 34.
The convention on human rights is a European Council convention. The European Council is a body separate from the European Union. The European Council has more than 40 members, many of which are not EU members.
I do agree that the EU is responsible for many regulations that push for increased protection of citizens' privacy though.
The effects are starting to be felt, and parts of the government are already hinting about the damage of leaving the EU. Hell, they've even admitted that an extremely good deal is needed otherwise the NHS is screwed. The EU provides support to some of the poorest areas of the UK, ironically the same ones that had the heaviest Leave votes. We're already seeing a backlash now people realise they're going to be out of pocket if we leave - the anti-EU Democratic Unionist Party is already scrounging for cash to replace lost EU funding a part of its deal to keep the Conservatives in power.
I give things until the end of the year, before Brexit collapses and we can hopefully go back to tackling the real issues that affect the UK. I was out canvassing during the election, and it was incredible how many people voted to leave and now regret it. The surge in support for Labour came from those people.
Lets face it, if we do leave then the UK population is going to quickly discover that the government and media are the cause of most of our social and economic problems, not the EU.
And from those lying though their teeth. Otherwise there would be no need for "loud voices", as convincing arguments would be available. For a ban on secure encryption, no convincing arguments exist, and such a ban would be excessively destructive to a modern economy.
My guess is this committee asked some actual experts, unlike fundamentally stupid and power-hungry people like May, Trump, etc. like to do.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
Everyone EXCEPT Remoaners realises that the UK can issues the same grants without the expensive middle-man taking his cut.
Take a look at your tax statement this year (you do pay tax in the UK, right?). It will have a breakdown of the amount that you're paying into the EU. Notice how tiny a percentage of the total tax revenue that is. Notice how it's far less than you're paying in council tax (assuming that you're not a student or otherwise exempt from council tax). Now, compare the proportion of that money that is spent improving the quality of poorer regions in the UK and investing in UK infrastructure than the proportion of the remainder. Now tell me who you'd rather have spending your taxes.
Or, if you don't want to do this on a purely financial basis, compare the EU data protection office with the actions of the UK's regulator ('oh, you just gave loads of medical records to Google / Deep Mind without consent of the patients? I'm sure that's fine') and tell me which you'd prefer having control over privacy. Or compare Theresa 'Encryption bad, must backdoor everything' May's attitude with TFA and tell me who you'd prefer.
The problem with the leave arguments is that almost all of the negative things about the EU (concentrating power in the Commission rather than the Parliament, pushing pro-corporation trade treaties, and so on) were pushed hard by the UK government's representatives in the Council of Ministers and over the objection of other EU countries. You don't like these things, so you'd rather give more power to the people responsible for them.
I am TheRaven on Soylent News