I feel like the only way to do something like this in a remotely not-insane manner with the assumption that there are good reasons where messages must be decrypted would be: * Each user gets a key to sign a message, there's also one for decryption like E2EE * The platform owners get a part of a backdoor key for decryption (per message) as well (call it another end in E2EE if you want) * The feds get a part of a backdoor key for decryption (per message) as well (call it another end in E2EE if you want) * A watchdog organization also gets a part of a backdoor key for decryption (per message) as well (call it another end in E2EE if you want) * If the feds want to decrypt something for actual anti-terrorism/anti-CSAM purposes, they convince both the platform owners and the watchdog org that they need keys for specific messages * The watchdog automatically publishes data like: "Law enforcement agency X accessed message Y decryption key for internal case number Z" (maybe with a bit of delay) * That way the users who have their messages decrypted can find that out what was accessed eventually * If the feds are snooping for no good reason or political bullshit reasons, they can get sued * If the feds are snooping too much (mass surveillance), it'd become obvious too cause you'd see that they're accessing millions of messages and maybe a few percent lead to actual arrests and convictions * This kinda rests on the assumption that courts would be fair and wouldn't protect corrupt feds Obviously this would never get implemented, cause the people of any watchdog org could also be corrupted not to publish the data that they should, there's probably numerous issues with backdooring encryption that you can come up with, and in practice it's way easier to implement government overreach by "Oh god, think of the children!" and move towards mass surveillance.
> In 2029 it's likely we'll have a more libertarian government Haha you're so funny. If Reform get from, what is it right now, five -- or four, or six, depending on how the wind blows — MPs to 326 MPs, which is enough to secure the majority they think they are getting, then libertarian is not what that government will be. It will be populist, white and significantly authoritarian, because pure tabloid authoritarian thuggery is the only possible strategy that could cause a swing larger than any in history, against two parties (labour and liberal democrat) who currently hold 472 seats and represent a sort of centrist blob between them. And this is to say nothing of the challenge they will face finding 326 non-crazy, credible candidates for 326 very different parliamentary elections. And to say nothing of the foreign influence scandal that currently engulfs senior Reform figures or the catastrophic issues already affecting Reform councils like Kent. Do you think Reform could succeed without Farage? And do you think Farage's reputation is going to somehow be improved by the Nathan Gill situation? I accept they will be the largest minority. But the parliamentary maths to get to an outright majority is really extreme; the system does not support such things easily. Maybe they will get to largest minority and then campaign for PR/AV/STV, and maybe finally people will understand something like it is needed. But Farage will be a lot older in that election. (It surprises me to see people who are so keen to believe that a council election wave is necessarily predictive of a national election wave because, what, somehow everything is different now? Why is it different?)
I have been successful in getting non-technical people onto Signal. As far as a technical product goes, Signal is kindof shit (among other things: no support for non-Debian-based Linux forcing users to use sketchy third party repos when they are a massive target for backdoors, really shitty UX for backups), but it gets the job done and seems to have robust encryption from what other people say (I am not qualified to evaluate this myself). If a P2P solution that solved the aforementioned Signal issues were to have excellent UX, then that could probably work. Lastly, what counts as "excellent UX" for technical and non-technical people seems to differ. For example, I consider Discord and Slack to be quite intuitive and easy to use, but multiple technical people have expressed to me that they find it to be very confusing and that they prefer other solutions, such as GroupMe in one example. To me, GroupMe shoving the SMS paradigm into something that's fundamentally not SMS is more confusing and poor UX, but to these non-technical people that seems easy. I suspect that Signal's shortcomings that I perceive are an example of this: making UX trade-offs that work great for non-technical people but are less good for technical people. I'm not sure what these specific UX trade-offs are, but I suspect that it's something akin to having a conceptually sound underlying model (like Discord or Slack servers/workspaces and channels), versus having really obvious "CLICK HERE TO NOT FUSS" buttons like GroupMe, while having graceful failures for non-technical users that can't even figure that out (like just pretending to be SMS in GroupMe's case if you can't figure out how to install an app, or don't want to put that effort in, something that many people know how to use).
 Top