UK Security Researchers criticize Online Safety Bill over encryption vulnerability

UK security researchers are the latest to raise concerns about the proposed Online Safety Bill, stating that it poses a risk to strong encryption. In an open letter signed by 68 security and privacy researchers, they warn that the draft legislation threatens the security technologies that are crucial for ensuring the safety of digital communications. Companies like WhatsApp, Signal, and Element have already expressed similar concerns and stated that they would rather withdraw their services from the UK market than compromise user security. Last week, Apple also spoke out against the bill, stating that it poses a serious threat to end-to-end encryption. An independent legal analysis of the legislation has also highlighted the risk it poses to encryption. The Online Safety Bill has already passed through scrutiny in the House of Commons and is currently under review in the House of Lords. The security researchers hope their expertise will persuade lawmakers in the House of Lords to defend encryption. They argue that the bill’s push for routine monitoring of communications will undermine critical security protocols and privacy guarantees. They also criticize the proposed use of client-side scanning and AI models, highlighting the potential for false positives and misuse of the technology. The researchers stress that there is no technological solution that can both maintain privacy and allow access to private messages. They warn against the expansion of surveillance powers and the potential for mission creep. It remains to be seen how lawmakers will respond to these concerns as the bill continues its legislative process.