Under the Online Safety Bill, which is currently being debated in the House of Commons, companies will be compelled to weaken security and provide “backdoor access” that bypasses encryption and provide access to any encrypted data in messages, cloud storage or logs on request.
If companies are required to provide backdoors, presumably what this means in practice is that they release a targeted update to their app with extra code in which breaks the privacy guarantees just for a specific user.
Assuming the app is open source and reproducibly builds, app stores could protect users by implementing Binary Transparency with a public append-only log, but presumably the law will be flexible enough to apply to OS vendors too, forcing them lie about the hashes of the apps that are downloaded.
Comments
If companies are required to provide backdoors, presumably what this means in practice is that they release a targeted update to their app with extra code in which breaks the privacy guarantees just for a specific user.
Assuming the app is open source and reproducibly builds, app stores could protect users by implementing Binary Transparency with a public append-only log, but presumably the law will be flexible enough to apply to OS vendors too, forcing them lie about the hashes of the apps that are downloaded.