News: 1605898572

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

End to end encryption? In Android's default messaging app? Don't worry, nobody else noticed either

(2020/11/20)


Analysis Google is rolling out end-to-end encryption in the unloved and unwanted Android Rich Communication Services, as part of a renewed hope people might use messaging services controlled by the Chocolate Factory.

The rollout seems to be a last roll of the dice for RCS, which began life as the telco industries’ SMS killer – or, more prosaically, their [1]belated response to the growth of over-the-top (OTT) messaging services such as Blackberry Messenger and WhatsApp.

Following Google-fuelled rumours in May of an E2E rollout for RCS, this week saw confirmation that a “beta” covering the entire world (less China and Russia) has been [2]put into force .

“We’re continually improving security protections to safeguard your privacy and will be rolling out end-to-end encryption, starting with one-on-one RCS conversations between people using Messages,” burbled Google bod Drew Rowny.

There’s three main problems for Google here: RCS is not about security; users have plenty of secure(ish) alternatives already; and the wider market couldn’t give a toss about RCS anyway.

RCS was conceived to both replace SMS messaging and halt the growth OTT messaging apps. As is obvious, it failed at both aims: Juniper Research [3]reckoned that just 16 per cent of mobile devices worldwide would support RCS this year, despite lots of early time and effort from the mobile industry and latterly Google itself.

While RCS is baked into the default Android Messages app, that is best known as the app which fields SMS messages and not the one you’d use for group chats, secure(ish) messaging or anything more upmarket than that.

Rich Communication Services: Nobody uses it, nobody wants it, but analysts reckon it's on the verge of a breakthrough [4]READ MORE

Despite some sneering at mobile networks’ “incoherent and broken” rollout of RCS over the past few years, this pitch at the security-focused end of the market feels like a last gasp, a final throw of the dice before the slow, sad shuffle to the cashier’s hatch while clutching that last sweaty chip, mumbling that just one more bet would have seen the odds swing in your favour.

WhatsApp deployed E2E security yonks ago, while more privacy-conscious folk who don’t trust the Facebook-owned firm’s promises have a fully functional alternative in Signal, or Apple’s iMessage for fans of the fruity firm.

And despite this latest Google-backed RCS marketing push being based on security, other industry sources have let the cat out of the bag: driving up RCS adoption has little to do with keeping users safe and [5]everything to do with harvesting users to feed into “a whole new category of targeted marketing”.

Increased security is a dubious selling point for mass-use messaging apps, at least in nothing-to-hide-nothing-to-fear Britain. Although Whatsapp flashes up a warning when the account on the other side of the chat changes its security key, in reality all this does is flag up that someone’s bought a new phone rather than been murdered and secretly replaced by an MI5 hooligan. ®

Get our [6]Tech Resources



[1] https://www.theregister.com/2019/02/20/sms_lives_omg/

[2] https://blog.google/products/messages/helping-you-connect-around-world-messages/

[3] https://www.theregister.com/2020/05/27/rcs_juniper_research/

[4] https://www.theregister.com/2020/05/27/rcs_juniper_research/

[5] https://telecoms.com/507569/google-completes-global-rollout-of-rcs-for-android/

[6] https://whitepapers.theregister.com/

Martin Summers

On an Android phone, just use Signal. You can make it your default messaging app and it just works. Sick of seeing RCS coming up begging to be enabled on work phones I've had to deploy recently. Google are too late to the party for OTT messaging just like they were with Google+

I will also only ditch WhatsApp if it slips further down the greasy Facebook pole.

Chewi

+1 for Signal. I actually installed it to replace the stock SMS app more than to communicate with other Signal users, the latter of which I can count on the fingers of one hand. It excels at both.

I've done this in a job years ago.

Anonymous Coward

When you can watch encrypted communications, even if you can't be bothered to read them, you can learn a lot by looking at the origin and destination, the length of the message, the time that it was sent, the speed at which the receiver replies, and everything that you know about the receiver. All Google has to do then is analyze everything that the sender and receiver does ... all things they have access to via standard user terms and conditions, and then update their database , and serve them and their related contacts an advert.

There's Nothing Fundamentally Wrong With The Idea Behind RCS

bazza

We all have SMS, an upgrade that was a neutral as SMS would be quite nice.

Re: There's Nothing Fundamentally Wrong With The Idea Behind RCS

AJ MacLeod

I agree... the biggest problem really is the lack of universality and if Apple were more disinterested it would have been the "new SMS" long ago.

I won't use Signal as it requires me to sign up with a phone number... Matrix seems to be the best alternative, I have a Synapse server running and the Element Android and mobile clients seem fine.

I had pancake makeup for brunch!