EU prepares to slap WhatsApp and others, but security experts are concerned

WhatsApp Web
(Image credit: Shutterstock)

Security experts are growing concerned about the potential implications of the EU's new Digital Markets Act (DMA) and the effects it could have on WhatsApp and other secure messaging services.

For those unfamiliar, the DMA aims to reign in big tech platforms in Europe so that smaller companies can better compete with Meta, Google, Microsoft and others.

As part of the new bill, large tech companies with a market capitalization of over €75bn and a user base of more than 45m in the EU would be required to create products that are interoperable with smaller platforms. While this will likely be fine for online collaboration tools and office software, there are a number of security risks for messaging services like WhatsApp that included end-to-end encryption as part of their offerings.

TechRadar needs you!

We're looking at how our readers use VPNs with different devices so we can improve our content and offer better advice. This survey shouldn't take more than 60 seconds of your time, and entrants from the UK and US will have the chance to enter a draw for a £100 Amazon gift card (or equivalent in USD). Thank you for taking part.

>> Click here to start the survey in a new window <<

The EU hopes that the DMA will help smaller competitors by breaking open some of the services provided by large tech giants that are considered gatekeepers due to the size of their customer base as well as their revenue. As a result, iPhone users could potentially be able to install third-party apps outside of the App Store, outside sellers may soon rank higher on Amazon's ecommerce platform and messaging apps would be required to allow users to send messages across multiple protocols, according to a new report from The Verge.

End-to-end encryption concerns

The DMA poses a serious problem for secure messaging services that included end-to-end encryption as part of their offerings.

Cryptographers agree that it will be difficult or even impossible to maintain encryption between apps which could put users at risk of having their messages and data exposed. While Signal is small enough that it likely won't be affected by the EU's new legislation, WhatsApp, which uses the Signal protocol, will likely need to change how its platform works.

As cryptographic standards need to be precisely implemented, security experts that spoke with The Verge warned that there is no easy way for secure messaging apps to provide both security and interoperability to their users. Essentially, different forms of encryption with different design features can't easily be fused together to comply with the DMA.

Internet security researcher and Columbia University computer science professor, Steven Bellovin provided further insight on the matter in a statement to The Verge, saying:

“Trying to reconcile two different cryptographic architectures simply can’t be done; one side or the other will have to make major changes. A design that works only when both parties are online will look very different than one that works with stored messages .... How do you make those two systems interoperate?”

As it stands now, every messaging service is responsible for its own security but by making them interoperable, users of one service could be exposed to vulnerabilities that may exist in another messaging platform.

Thankfully, there's still time for either the EU to reverse course or for secure messaging app providers to devise a way to make their services interoperable with smaller competitors as Digital Markets Act won't be implemented before next year.

Via The Verge

TOPICS
Anthony Spadafora

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Read more
Conceptual image of a large group of cctv camera watching and spying on a mobile phone with messages, it illustrates digital surveillance concept
New EU Chat Control makes scanning encrypted chats optional – but privacy experts are still worried
Composite image of digital eye and British flag
Apple could soon be forced to give away all your encrypted data to the UK government
A hand holding an iPhone with the iCloud logo on screen.
UK's Apple iCloud backdoor "jeopardizes the security and privacy of millions," warn experts
ignal messaging application President Meredith Whittaker poses for a photograph before an interview at the Europe&#039;s largest tech conference, the Web Summit, in Lisbon on November 4, 2022.
"We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections
President-elect Donald Trump and Elon Musk pose for a photo during the UFC 309 event at Madison Square Garden on November 16, 2024 in New York City.
Trump 2.0 is a win for Big Tech – but it may not be for encryption
Privacy
"Anonymity is not a fundamental right": experts disagree with Europol chief's request for encryption back door
Latest in Security
China
Notorious Chinese hackers FamousSparrow allegedly target US financial firms
A digital representation of a lock
NYU website defaced as hacker leaks info on a million students
NHS
NHS IT supplier hit with major fine following ransomware attack
Businessman holding a magnifier and searching for a hacker within a business team.
Cloud streaming hoster StreamElements confirms data breach following attack
A digital representation of blockchain.
Malicious npm packages use devious backdoors to target users
Data leak
Top home hardware firm data leak could see millions of customers affected
Latest in News
Three angles of the Apple MacBook Air 15-inch M4 laptop above a desk
Apple MacBook Air 15-inch (M4) review roundup – should you buy Apple's new lightweight laptop?
Witchbrook
Witchbrook, the life-sim I've been waiting years for, finally has a release window and it's sooner than you think
Shigeru Miyamoto presents Nintendo Today app
Nintendo Today smartphone app is out now on iOS and Android devices – and here's what it does
Nintendo Virtual Game Card
Nintendo reveals the new Virtual Game Card feature, an easier way to manage your digital Switch games
Nintendo Switch 2
The Nintendo Switch 2 pre-order date has seemingly been confirmed by Best Buy Canada – here's when you'll be able to order yours
Person printing
Microsoft’s latest Windows 11 update exorcises possessed printers that spewed out pages of random characters