The French government has been pushing for a stupid "backdoors" policy in encryption for quite some time. A couple years ago, following various terrorist attacks, there was talk of requiring backdoors to encrypted communications, and there was even a bill proposed that would jail execs who refused to decrypt data. Current President Emmanuel Macron has come out in favor of backdoors as well, even as he's a heavy user of Telegram (which isn't considered particularly secure encryption in the first place).

But now, the French government is apparently moving forward with its own, homegrown, encrypted messaging system, out of a fear that other -- non-French -- encrypted messaging apps will be forced into providing backdoors to their own systems:

The French government is building its own encrypted messenger service to ease fears that foreign entities could spy on private conversations between top officials, the digital ministry said on Monday.

None of the world’s major encrypted messaging apps, including Facebook’s WhatsApp and Telegram - a favorite of President Emmanuel Macron - are based in France, raising the risk of data breaches at servers outside the country.

There are a number of silly things here. First off, the fact that they're doing this should make it clear why it's been so stupid to have the government itself calling for backdoors. Clearly, the French government understands the risks involved, or it wouldn't be doing this in the first place. The message it seems to be sending is that keeping messages and communications secure is important... but only for government officials. For the peasants? Let them eat insecure messages, I guess.

Second, there should be questions about how well this will be implemented. The report does note that they're using "free-to-use code found on the Internet," which (hopefully?) means they're basing it on Open Whisper Systems' encrypted messaging code, which is freely available and is generally considered the gold standard (Update: actually it's based on Riot/Matrix and apparently the plan is to open source it -- which is good). However, doing encrypted messaging well is... difficult. It's the kind of thing that lots of people -- even experts -- get wrong. Rolling your own can often get messy, and you have to bet that a government rolling its own encryption for government officials to use is going to be a clear target for nation-state level hackers to try to break in. That's not to say it can't be done, but there are a lot of tradeoffs here, and I'm not sure that the best encryption is going to come from a government employee.

Also, the report suggests that this technology "could be eventually made available to all citizens," which would certainly be interesting, but would seem to contradict with all of those reports and statements about demanding backdoored encryption. Given how often the French government (and the President) have asked for backdoors, would any French citizen ever feel particularly secure using an "encrypted" messaging system offered up by that same French government?

French President Emmanuel Macron was held up by some in the tech industry as a moderate who "got technology" leading up to his election. And yet, every time he seems to weigh in on tech related issues, it's with an absolutely terrible take on it. He wanted to mandate encryption backdoors and demand internet censorship of "radicals" online who post "inflammatory content." And now he's expanding that position and saying he wants to ban "fake news" during election season.

In his new year’s speech to journalists at the &‌Eacute;lys&‌eacute;e palace, Macron said he would shortly present the new law in order to fight the spread of fake news, which he said threatened liberal democracies.

New legislation for websites would include more transparency about sponsored content. Under the new law, websites would have to say who is financing them and the amount of money for sponsored content would be capped.

For fake news published during election seasons, an emergency legal action could allow authorities to remove that content or even block the website, Macron said. “If we want to protect liberal democracies, we must be strong and have clear rules,” he added.

The transparency idea isn't such a bad one (though the details would matter quite a bit), but it's unclear why the amount of money for sponsored content should be capped if it's clearly labeled and disclosed. But the really troubling part is that last one, allowing for "emergency legal action" to remove content. It may not be surprising that Macron is saying this about fake news -- since there were reports of a burst of fake new campaigns that tried to influence the French electorate to vote against Macron in the election.

But, as we've discussed many, many times -- the idea of government-mandated censorship, even if for the idea of stopping "fake news" is a terrible idea. It will be abused and abused badly. Remember, while the term "fake news" was first popularized by people who were upset about Donald Trump's election, he's now co-opted the term and uses it to argue that any media report that makes him look bad is "fake news." Imagine what a Trump or a French Trump-like figure would do with this kind of power?

A big part of the problem, obviously, is that "fake news" means different things to different people, and whoever has the power to order such content taken down will have plenty of opportunities to abuse that power -- such as to take down news that is merely unflattering to those in power. Or, even on a more subtle level, what if an unflattering story has a few small errors or misrepresentations. Claim "fake news" and make it disappear. This eagerness of so many to immediately leap to "censor it!" as the only possible response to propaganda is highly troubling -- and most certainly goes against the French ideals of freedom.

For some observers, struggling UK Prime Minister Theresa May and triumphant French President Emmanuel Macron may seem at somewhat opposite ends of the current political climate. But... apparently they agree on one really, really bad idea: that it's time to massively censor the internet and to blame tech companies if they don't censor enough. We've been explaining for many years why this is a bad idea, but apparently we need to do so again. First, the plan:

The prime minister and Emmanuel Macron will launch a joint campaign on Tuesday to tackle online radicalisation, a personal priority of the prime minister from her time as home secretary and a comfortable agenda for the pair to agree upon before Brexit negotiations begin next week.

In particular, the two say they intend to create a new legal liability for tech companies if they fail to remove inflammatory content, which could include penalties such as fines.

It's no surprise that May is pushing for this. She's been pushing to regulate the internet for quite some time, and it's a core part of her platform (which is a bit "weak and wobbly" as they say these days). But, Macron... well, he's been held up repeatedly as a "friend" to the tech industry, so this has to be seen as a bit of a surprise in the internet world. Of course, there were hints that he might not really be all that well versed in the way technology works when he appeared to support backdoors to encryption. This latest move just confirms an unfortunate ignorance about the technology/internet landscape.

Creating a new legal liability for companies that fail to remove inflammatory content is going to be a massive disaster in many, many ways. It will damage the internet economy in Europe. It will create massive harms to free speech. And, it won't do what they seem to think it will do: it won't stop terrorists from posting propaganda online.

First, a regime that fines companies for failing to remove "inflammatory content" will lead companies to censor broadly, out of fear that any borderline content they leave up may open them up to massive liability. This is exactly how the Great Firewall of China works. The Chinese government doesn't just say "censor bad stuff" it tells ISPs that they'll get fined if they allow bad stuff through. And thus, the ISPs over-censor to avoid leaving anything that might put them at risk online. And, when it comes to free speech, doing something "the way the Chinese do things" tends not to be the best idea.

Second, related to that, once they open up this can of worms, they may not be happy with how it turns out. It's great to say that you don't think "inflammatory content" should be allowed online, but who gets to define "inflammatory" makes a pretty big difference. As we've noted, you always want to design regulations as if the people you trust the least are in power. This is not to say that May or Macron themselves would do this, but would you put it past some politicians in power to argue that online content from political opponents is too "inflammatory" and thus must be removed? What about if the press reveals corruption? That could be considered "inflammatory" as well.

Third, one person's "inflammatory content" is another's "useful evidence." We see this all the time in other censorship cases. I've written before about how YouTube was pressured to take down inflammatory "terrorist videos" in the past, and ended up taking down the account of a human rights group documenting atrocities in Syria. It's easy to say "take down terrorist content!" but it's not always easy to recognize what's terrorist propaganda versus what's people documenting the horrors that the terrorists are committing.

Fourth, time and time again, we've seen the intelligence community come out and argue against this kind of censorship, noting that terrorists posting inflammatory content online is a really useful way to figure out what they're up to. Demanding that platforms take down these useful sources of open source intelligence will actually harm the intelligence community's ability to monitor and stop plans of attack.

Fifth, this move will almost certainly be used by autocratic and dictatorial regimes to justify their own widespread crackdown on free speech. And, sure, they might do that already, but removing the moral high ground can be deeply problematic in diplomatic situations. How can UK or French diplomats push for more freedom of expression in, say, China or Iran, if they're actively putting this in place back home. Sure, you can say that they're different, but the officials from those countries will argue it's the exact same thing: you're censoring the internet to "protect" people from "dangerous content." Well, they'll argue, that's the same thing that we do -- it's just that we have different threats we need to protect against.

Sixth, this will inevitably be bad for innovation and the economy in both countries. Time and time again, we've seen that leaving internet platforms free from liability for the actions of their users is what has helped those companies develop, provide useful services, employ lots of people and generally help create new economic opportunities. With this plan, sure, Google and Facebook can likely figure out some way to censor some content -- and can probably stand the risk of some liability. But pretty much every other smaller platform? Good luck. If I were running a platform company in either country, I'd be looking to move elsewhere, because the cost of complying and the risk of failing to take down content would simply be too much.

Seventh, and finally, it won't work. The "problem" is not that this content exists. The problem is that lots of people out there are susceptible to such content and are interested and/or swayed by it. That's a much more fundamental problem, and censoring such content doesn't do much good. Instead, it tends to only rally up those who were already susceptible to it. They see that the powers-that-be -- who they already don't trust -- find this content "too dangerous" and that draws them in even closer to it. And of course that content will find many other places to live online.

Censoring "bad" content always seems like an easy solution if you haven't actually thought through the issues. It's not a surprise that May hasn't -- but we had hopes that perhaps Macron wouldn't be swayed by the same weak arguments.

France's presidential election season has kicked in. The supposed "moderate" of the bunch -- Emmanuel Macron -- has managed to gain considerable support in the last several months. Some of this has sprung from our own recent election. Earlier this year, the candidate took digs at Trump's anti-climate change stance, stating France would welcome dejected US scientists with open arms.

He also said this, taking a shot at Trump's planned border wall.

Macron also had a thinly veiled dig at Trump’s intention to build a wall along the Mexico border, comparing it to France’s Maginot Line, which in 1940 failed to keep Nazi invaders out of France.

“I don’t want to build a wall. I can assure you there’s no wall in my program,” he told about 8,000 cheering supporters. “Can you remember the Maginot Line?”

Macron has, for the most part, refused to get swept up in post-terrorist attack hysteria. Most of his statements have stressed restraint rather than indulge in expansions of government power, as so many others are prone to do.

But something's changed recently. Macron may be the moderate who doesn't want European nations to turn into police states in reaction to terrorist attacks. But he appears to feel there's a certain amount of security/privacy that could be sacrificed to fight terrorism.

Speaking at his Paris launch, Mr Macron said he wants to legally compel social media companies to give authorities access to encrypted messages between terror suspects.

"Democratic states must have access to content exchanged between terrorists on social media and instant messaging," he said, while introducing a five-point strategy that would bring in new powers across Europe.

He said it was "no longer acceptable" for companies to insist that they have a contractual obligation to clients after offering protected communication.

He cited Google, Facebook, Apple and Twitter as those he wants to have frank discussions with.

This sounds like the French counterpart to the "adult conversations" FBI Director James Comey wants to have with tech companies about encryption. Of course, in Comey's case, the "conversation" doesn't necessarily even have to include tech companies. He's fine with legislation or All Writs Orders or whatever for the time being -- anything that doesn't involve actually speaking to anyone who understands encryption.

It's tougher to get a read on Macron's desires and intentions. He hasn't spent months hammering away this issue or claiming terrorists are staying ahead of law enforcement by using Whatsapp or iPhones or spiral-bound notebooks. But what he's suggesting is rather breathtaking: an EU-wide undermining of encryption. If tech companies are offering encryption, they're going to have craft backdoors or start holding onto users' encryption keys. The other alternative would be to pull themselves out of the European market, which seems like the least likely route they will take.

Even if elected, there's no guarantee the country's legislators will comply with Macron's wishes. Despite recent terrorist attacks on French soil, no further action has been taken to undermine encryption, despite periodic calls to do so being issued by more panicky members of the French government.

Macron's pronouncement seems at odds with his refusal to be cowed by terrorists or be pushed towards sacrificing the public's rights and privileges on the altar of national security. No further details were offered by Macron to explain this stance, but presumably there will be much more discussion of this surprising announcement in the near future.