The Digital Markets Act has caused a stir, as it has opened up a real Pandora’s box by ruling that users on different messaging platforms should be able to exchange messages with each other. Jenny Blessing and Ross Anderson have evaluated the security of systems designed to allow the various Internet messaging platforms to interoperate with each other in their paper “One Protocol to Rule Them All? On Securing Interoperable Messaging”. In their paper, they discuss the security tensions, conflicts of interest, usability traps, and likely consequences for individual and institutional behavior, as well as the additional attack surface that could be opened up due to the increased complexity of these systems.
The authors note that interoperability will vastly increase the attack surface at every level in the stack – from the cryptography up through usability to commercial incentives and the opportunities for government interference. In theory, this may be a good idea, but in practice, it will likely result in the overall security being the worst of each platform’s security.
As the number of users across different platforms continues to grow, it is important for us to be aware of the security implications of message interoperability. Research such as Blessing and Anderson’s paper are critical for helping us understand the security risks of interoperability and how best to mitigate these risks.
In conclusion, Blessing and Anderson have evaluated the security of systems designed to allow the various Internet messaging platforms to interoperate with each other, noting the potential security risks and how they could be mitigated. It is important for us to be aware of the security implications of message interoperability, as it could have far-reaching consequences for individual users and institutions.
Key Points:
• The Digital Markets Act has opened up a real Pandora’s box by allowing users on different messaging platforms to exchange messages with each other.
• Jenny Blessing and Ross Anderson have evaluated the security of systems designed to allow the various Internet messaging platforms to interoperate.
• Interoperability will vastly increase the attack surface, resulting in the overall security being the worst of each platform’s security.
• It is important for us to be aware of the security implications of message interoperability.