Security News > 2023 > March > The Security Vulnerabilities of Message Interoperability

The Security Vulnerabilities of Message Interoperability
2023-03-29 11:03

The Digital Markets Act ruled that users on different platforms should be able to exchange messages with each other.

How will the networks manage keys, authenticate users, and moderate content? How much metadata will have to be shared, and how?

In our latest paper, One Protocol to Rule Them All? On Securing Interoperable Messaging, we explore the security tensions, the conflicts of interest, the usability traps, and the likely consequences for individual and institutional behaviour.

Interoperability will vastly increase the attack surface at every level in the stack from the cryptography up through usability to commercial incentives and the opportunities for government interference.

It's a good idea in theory, but will likely result in the overall security being the worst of each platform's security.

Tags: academic papers, authentication, economics of security, privacy, psychology of security.


News URL

https://www.schneier.com/blog/archives/2023/03/the-security-vulnerabilities-of-message-interoperability.html