Alarmerende - EU vil scanne Signal, Whatsapp, Telegram ++

[Laffen]

Fikk tips fra en kamerat i går som hadde fanget opp denne nyhetssaken på Document.no. Ikke sett det nevnt i de større mainstream mediene per nå.

Fra Brussel kommer et nytt forslag som kan endre digital kommunikasjon i hele Europa. EU vil pålegge meldingstjenester å skanne alt innhold før det sendes, noe kritikere advarer mot. De hevder det er et skritt mot permanent masseovervåkning.

Ikke uventet på et vis, men likevel alarmerende om krypterte meldingstjenester havner under slik kontroll.

Vil det treffe oss som selfhoster feks Matrix på Raspberry PI på eget stål i kjeller´n?

[Laffen]

Flere linker fra andre steder som bekrefter forslaget:

https://cointelegraph.com/news/eu-ch...ens-encryption

A controversial European Union proposal dubbed “Chat Control” is regaining momentum, with 19 out of 27 EU member states reportedly backing the measure.

The plan would mandate that messaging platforms, including WhatsApp, Signal and Telegram, must scan every message, photo and video sent by users starting in October, even if end-to-end encryption is in place, popular French tech blogger Korben wrote on Monday.

https://www.theguardian.com/commentisfree/2025/jan/24/eu-digital-surveillance-child-protection

Lawmakers argue that mass surveillance will help to protect children. But the implications for our privacy and security are staggering

https://www.aljazeera.com/economy/2024/6/20/orwellian-eus-push-to-mass-scan-private-messages-on-whatsapp-signal

‘Orwellian’: EU’s push to mass scan private messages on WhatsApp, Signal


EU member states to vote on controversial Chat Control 2 proposals to scan communications for child sex abuse material.

[Laffen]

Spurte ChatGPT om følgende:

Chat Control - will it also cover self hosted matrix servers?

As of now (August 2025), Chat Control—officially known as the EU's CSA Regulation (Regulation to prevent and combat child sexual abuse)—is primarily aimed at online communication service providers operating within or serving users in the European Union. Here's what we know regarding self-hosted Matrix servers, including yours in Norway:

---

✅ What Chat Control Covers

• Big tech platforms: Like Meta (Facebook, WhatsApp), Google, Apple, etc.
• Communication apps: WhatsApp, Signal, Telegram, etc.
• Hosting providers and email services operating in or serving the EU.
• Any provider that enables interpersonal communication, if it serves EU residents.

---

❌ What It Probably Won’t Cover


If your Matrix Synapse server is self-hosted, private, and non-commercial, it might not fall under the CSA Regulation's direct scope, especially if:

• It is used only by yourself or a closed group (family, friends).
• You are not offering it as a service to the public.
• Your server does not process communications for EU customers/users outside your own use.

That said, if you're:

• Accepting registrations from the public or
• Operating in a way that resembles a communications service provider (even non-commercial),

then you might be considered "in scope" under some interpretations of the law.

---

🇳🇴 What About Norway?

• Norway is not an EU member, but it is part of the EEA (European Economic Area).
• Norway often implements EU regulations, especially in digital and consumer protection laws.
• The Norwegian Data Protection Authority (Datatilsynet) and the government will decide whether and how to implement Chat Control, likely with some adaptation.

So your Norwegian-hosted Matrix server could be affected in the future—especially if:

• The regulation is adopted into EEA law (highly likely).
• Your server is open for registration or public use.

---

🔐 End-to-End Encryption?


The EU regulation pressures providers to scan content, even E2EE messages, using client-side scanning (before encryption).
For Matrix:

• The Matrix.org Foundation has strongly opposed client-side scanning.
• If your server is E2EE-only, and you control all clients, you're not technically compelled (yet) to implement client-side scanning.
• But official Matrix clients or bridges could be forced to adopt it if distributed in the EU.

---

🧭 Summary for Your Case

Self-hosted Matrix Synapse	✅ Yes
Hosted in Norway (EEA)	✅ Yes
Private use (not public server)	❌ Probably not covered
Public registrations enabled	⚠️ Might be covered
E2EE enforced	🔐 Yes, but not safe from future legal changes

---

[Laffen]

Tråd om dette hos GrapheneOS:

https://discuss.grapheneos.org/d/24743-eu-revives-chat-control-ways-to-navigate-it-if-this-happens