News
WhatsApp introduces end-to-end encryption to one billion users - expert comments
April 2016 by
WhatsApp has today announced that all its content is now fully encrypted. This move
follows the recent battle between Apple and the FBI over encrypted content on a
terror suspect’s iPhone. This new addition to its security features will enhance
user privacy, and means that all content within WhatsApp, including voice calls,
videos and group chats across both iOS and Android are now covered by what is known
as "end-to-end encryption." Experts comments.
Richard Cassidy, technical director EMEA at Alert Logic:
"WhatsApp decision to encrypt it’s data certainly heralds a big win for data privacy
advocates of instant messenger applications; something that has become a
bone-of-contention among privacy rights groups and users of WhatsApp globally. Apple
and Google have led the way in taking a firm stance in protecting its users data,
however in the current climate, where data intelligence is key to assuring the
security of nations against nefarious acts by terrorist organisations, there needs
to be the capacity to ensure data can be accessed where suspects are identified. It
is clear that well defined legislation should govern access to any such data, so
that legitimate users don’t feel their privacy would be comprised under normal usage
circumstances. This move signals a clear direction by popular user applications and
IM services that others will follow suit on, to attract more users concerned with
their data privacy rights, which we are seeing a stark increase of globally"
Fred Touchette, manager of security research at AppRiver:
"WhatsApp’s decision to offer full end to end encryption is a great thing. People
have the right to privacy and security and this will certainly help provide more of
both of those for the WhatsApp users. If more companies used or provided more
encryption, even outside the mobile market, we would certainly read far less about
breaches wherein the data that was stolen was not only easily accessible, but also
easily readable. Security and privacy are a good thing and we should all welcome it
with open arms."
Cris Thomas, strategist at Tenable Network Security:
"Extending encryption to the videos, photos and communications of 1 billion users is
a strong statement by WhatsApp following the Apple/FBI case, especially because the
level of encryption being used will prevent even WhatsApp from accessing customers’
encrypted data, effectively pre-empting any attempts by law enforcement to force the
company to compromise the security of its products. Strong encryption is essential
in this hyperconnected age, not just for security and privacy, but for freedom of
thought and expression.
Also note that just because you use WhatsApp doesn’t necessarily mean no one can
read your messages. If you’re using an unencrypted iCloud backup or someone has
access to your Android device your messages are still readable. Think of this as
using an armoured truck to deliver cash between two people who live in a public
park. The messages while in transit are secure, but the endpoints are still
vulnerable. That doesn’t lessen the importance of what WhatsApp has done here, but
people need to understand their personal threat model."
Lee Munson, security researcher for Comparitech.com:
"Wire-tappers lament, law-abiding citizens rejoice, for WhatsApp’s latest update
is a victory for communications privacy. With the ability to access data removed
even from the company behind the app, only ill-informed law enforcement agencies are
likely to mutter “terrorists” as the masses enjoy the encrypted text messages,
photos, video and phone calls they’ve been demanding ever since Edward Snowden
blew the lid on government surveillance."
