Signal: Will leave the EU market rather than undermine our privacy guarantees
Signal says it will exit the EU rather than comply with a proposed “chat control” law that would require client‑side scanning of images, videos and links, effectively breaking end‑to‑end encryption guarantees. Commenters argue this would amount to mass surveillance justified by child protection, note that determined criminals could easily evade the scans, and fear a broader erosion of digital privacy and general‑purpose computing. Others weigh alternatives such as decentralized or self‑hosted messengers, and highlight the role of EU institutions and upcoming elections in either stopping or entrenching such measures.
EU “Chat Control” Proposal
- Draft EU regulation would require apps with chat functions to offer client-side scanning of images/videos/links or block those features for users who refuse.
- End-to-end encrypted services would have to scan “prior to transmission”; text and voice scanning were dropped in latest draft.
- Critics argue this effectively mandates mass surveillance, conflicts with human-rights guarantees on private correspondence, and is likely to be challenged at the EU Court of Justice.
- Some question cost and feasibility of running AI vision on all media; others suspect lobbying by scanning/AI vendors and broader intelligence interests.
- Many point out it’s trivial to evade with encrypted archives, steganography, or custom protocols, so it mostly impacts ordinary users, not serious criminals.
Signal’s Response and Role
- Signal states it will not implement scanning and would rather leave EU markets, though some note their similar stance in the UK did not result in an exit.
- Likely strategy described as “do nothing, stay secure, wait to be banned rather than comply.”
- Some users worry about losing Signal in the EU; others say Signal’s only value is strong privacy, so compromising crypto would make it pointless anyway.
Privacy, Threat Models, and ‘Nothing to Hide’
- Large subthread debates why non‑criminals should care: examples include Cambridge Analytica-style manipulation, future regime changes (e.g., abortion bans), insurance/employer abuse, and mistaken metadata-based prosecutions.
- Others demand “tangible harms” and see current risks mainly as spam, targeting, and hypothetical future abuse.
- Widespread concern that normalized client-side scanning plus AI will erode general-purpose computing and chill speech.
Alternatives and Decentralization
- Suggested replacements: Threema, SimpleX, Session, Briar, Wire, Matrix, XMPP/OMEMO, DeltaChat; privacy guides are cited.
- Many argue centralized services like Signal are structurally vulnerable to such laws; advocate self-hosted and federated protocols (XMPP, Matrix), Tor/I2P, or even satellite/mesh networks.
- Counter-arguments highlight federation’s complexity, resource-heavy Matrix servers, app-store chokepoints (iOS notarization), and low likelihood of mass adoption.
EU Politics and Legitimacy
- Discussion on whether responsibility lies with the Commission, Council, or Parliament; Parliament has previously opposed indiscriminate scanning.
- Upcoming EU elections are framed as a chance to support privacy-friendly parties (e.g., Pirates, some Greens/Renew), though some argue EU structures are inherently prone to opaque, lobby-driven regulation.
- Others defend the EU’s broader benefits while criticizing this proposal specifically.