- West Virginia corrections employees suspended after Nazi salute photo surfaces Thursday 8:02 PM
- Here are the 15 best Eddie Murphy movies available to stream Thursday 7:56 PM
- Ex-InfoWars video editor admits to making up Islamophobic stories Thursday 6:55 PM
- WhatsApp accounts deleted amid Kashmir internet blackout Thursday 6:21 PM
- Guy gets mocked for tattoo of Baby Yoda drinking White Claw Thursday 6:18 PM
- Spotify Wrapped has people asking just how much it knows about us Thursday 5:50 PM
- Instagram account allegedly asked for inappropriate photos of children Thursday 5:16 PM
- How to stream ‘Boys vs. Bears on Thursday Night Football Thursday 4:33 PM
- Woman caught her boyfriend cheating through his Fitbit Thursday 4:29 PM
- The Pete Buttigieg ‘High Hopes’ dance was designed by an intern Thursday 4:17 PM
- TikTok admits to hiding content made by fat, LGBTQ, and disabled users Thursday 3:58 PM
- ‘Merry Happy Whatever’ is an unoriginal sitcom with plenty of holiday cheer Thursday 3:55 PM
- The ‘Pod Save America’ Bros are losing it over Joe Biden’s newest ad Thursday 3:28 PM
- Van Halen had a wholesome response in defense of Billie Eilish Thursday 3:15 PM
- Influencer faces wrath of K-pop fans after her son played with penis-shaped soap Thursday 1:27 PM
After a long wait, a draft of a Senate bill effectively mandating backdoors in encryption in the United States leaked to the public late Thursday night.
The bill, co-authored by Sens. Richard Burr (R-N.C.) and Dianne Feinstein (D-Calif.), directs companies to provide “information or data” to the government “in an intelligible format” when a court orders them to do so. If a company cannot do it—because of encryption—they must offer technical assistance to obtain the data.
Encryption has been at the center of a political storm for several years now, one that’s flared in intensity in the last year as American tech companies like Apple, Facebook, and Google continue to push for mainstream adoption of encryption.
“The first thing that’s going to happen is that any backdoor legislation is going to be tied up in the courts for years.”
In the event the Burr bill passes Congress and is signed into law, the legal challenges will be considerable.
“The first thing that’s going to happen is that any backdoor legislation is going to be tied up in the courts for years,” Nate Cardozo, staff attorney at the Electronic Frontier Foundation, told the Daily Dot. “The EFF is going to lead that effort. So nothing will happen at the beginning.”
A wide consensus of technologists agree that backdoors into encryption—even if they are originally meant specifically for one agency or purpose—create a larger vulnerability that weakens cybersecurity overall.
Burr holds the opposing stance, arguing that legally mandated backdoors do nothing to weaken encryption.
“There is nothing in the draft language of the bill that calls for weaker encryption,” Burr told the Daily Dot in a previous email interview. “I support encryption. I believe it is a priority to keep Americans’ information safe and I also believe that private entities are also subject to U.S. law. When a judge issues an order, we are all required to follow the law.”
While the encryption debate continues to rage in the U.S., other countries have taken steps to settle it. The Dutch government, for example, issued a strong statement against weakening encryption for the purposes of law enforcement.
Simon Crosby, the chief technology officer of the security firm Bromium, told the Daily Dot why he thinks the Dutch model ought to be held up highly around the world.
“The Dutch government’s decision is laudable in light of the fact that back-doored, or weakened encryption has been repeatedly shown to render both organizations and individuals vulnerable to surveillance–whether by government or malicious actors,” Crosby said. “Ultimately, if we make strong encryption illegal then only criminals will have access to strong encryption–which is precisely the opposite of the desired outcome. The encryption genie is out of the bottle, and there’s no putting it back.”
Burr and Feinstein say they are still working on finalizing the language of the legislation. “However, the underlying goal is simple,” the two senators said in a joint statement. “When there’s a court order to render technical assistance to law enforcement or provide decrypted information, that court order is carried out. No individual or company is above the law. ”
Patrick Howell O'Neill is a notable cybersecurity reporter whose work has focused on the dark net, national security, and law enforcement. A former senior writer at the Daily Dot, O'Neill joined CyberScoop in October 2016. I am a cybersecurity journalist at CyberScoop. I cover the security industry, national security and law enforcement.