The Durov saga in France and the continued efforts by countries around the world to crack down on his popular cloud-based, end-to-end encrypted private messenger and social media software has divulged a string of embarrassing details about the sorry state of internet privacy and freedom of information.
Two of the six charges facing Telegram CEO Pavel Durov in France are grounded an obscure, never-used twenty-year-old law obliging companies providing cryptography tools to inform the French Cybersecurity Agency (French acronym ANSSI) and grant it access to the software’s source code and “a description of [its] technical characteristics.”
The 2004 law – uniquely blunt in its demand that companies divulge info about the tech tools used for private communications, is being used against Durov by accusing him of providing encrypted communications services “without certified declaration.”
The legal requirement also means, if it is applied evenly across the board, that the array of instant messengers available to French users, from WhatsApp and Signal to iMessage and the French-made Olvid ‘secure’ messenger used by the French government, do comply with ANSSI regulations, meaning French intelligence can potentially spy on any or all French users at any time.
“If sustained, I don’t see how tech founders could possibly travel to France, much less hire in France,” Yen wrote last week.