I can’t insist enough on how bad this is. Putting at risk all messenging systems, it would be only a matter of time before a malevolent actor get the keys and get all kind of personal and sensitive data.

    • matlag@sh.itjust.worksOP
      link
      fedilink
      arrow-up
      2
      ·
      5 days ago

      Signal would have to get a copy of user’s private keys, and a history of the messages for one year.

      You can imagine all that could go wrong with that: example: breach in their server. Today that would yield a list of phone numbers and… that’s pretty much it. After the bill is effective: one year of all communications from all canadians users. That’s assuming they put in the resources to offer separate clients for Canada and the rest of the world, add the internal infra to support data collection, and geographically constrain who can download which client.

      They already warned they wouldn’t do that, as it would severely compromise the security of their app, defeating its purpose, and most likely excessively strain their resources. Therefore the law would force them to depart Canada, and geographically block their app’s downloading here.