Investigated

Canada’s Bill C-22 is forcing encryption into a fight over whether lawful access needs a backdoor.

Derived from:“Encryption Is Getting Squeezed From All Sides”· WIRED Security

The deeper question

A legal demand for access can still weaken Canada’s encrypted services if providers must build a new path into them.

The deeper concern is structural: end-to-end encryption is designed so providers cannot simply unlock messages, making a legally mandated access capability difficult to separate from a new weakness. Apple, Meta, Signal, VPN providers, civil-liberties groups, and privacy specialists warn that even a narrowly framed capability could expose millions of users, while amendments may leave the central technical question unanswered.

Apple and Meta warn that Bill C-22 could require encryption backdoors or weakened device security, while Public Safety Canada disputes that it would require systemic vulnerabilities.
The bill’s proposed powers to require providers to install equipment or develop capabilities are central to concerns that encryption could be compromised.
Signal and other encrypted-service providers have indicated that lawful access cannot be added to encrypted systems without unacceptable security consequences, according to the originating report.

Mainstream

Canada’s Bill C-22 seeks lawful access to digital evidence, while the government says it will not require systemic encryption weaknesses.

Bill C-22 is presented as a framework for obtaining information that authorities are already legally entitled to access, including through standardized technical capabilities at electronic service providers. The government says the legislation will not require systemic vulnerabilities or breach encryption, and has promised clarifying amendments. The unresolved issue is whether the bill’s operational powers can be implemented without weakening protections for other users.

The government frames lawful access as the ability to obtain legally authorized information and communications, while creating technical capabilities for providers to comply.
Public Safety Minister Gary Anandasangaree said the bill was never meant to breach encryption and promised clarification of the systemic-vulnerabilities language.
The government says amendments will address encryption and metadata concerns, but the bill remains intended to become law.

Weighing mainstream and alternative accounts…

The deeper question

Mainstream

Follow the white rabbit

Deeper threads worth pulling on next.

Investigated

Oligarchy

Canada’s Bill C-22 is forcing encryption into a fight over whether lawful access needs a backdoor.

Derived from:“Encryption Is Getting Squeezed From All Sides”· WIRED Security

Image: reuters.com

The deeper question

A legal demand for access can still weaken Canada’s encrypted services if providers must build a new path into them.

Apple and Meta warn that Bill C-22 could require encryption backdoors or weakened device security, while Public Safety Canada disputes that it would require systemic vulnerabilities.
The bill’s proposed powers to require providers to install equipment or develop capabilities are central to concerns that encryption could be compromised.
Signal and other encrypted-service providers have indicated that lawful access cannot be added to encrypted systems without unacceptable security consequences, according to the originating report.

Mainstream

Canada’s Bill C-22 seeks lawful access to digital evidence, while the government says it will not require systemic encryption weaknesses.

The government frames lawful access as the ability to obtain legally authorized information and communications, while creating technical capabilities for providers to comply.
Public Safety Minister Gary Anandasangaree said the bill was never meant to breach encryption and promised clarification of the systemic-vulnerabilities language.
The government says amendments will address encryption and metadata concerns, but the bill remains intended to become law.