Meta has explained how WhatsApp will preserve its end-to-end encrypted messaging while remaining interoperable with third-party messaging services.

Although accelerated by the European Union introducing its Digital Markets Act (DMA) for stricter regulation of designated messaging services, or digital “gatekeepers”, WhatsApp has been developing a solution enabling third-party interoperability for two years.

Third-party providers must sign an agreement to interoperate with Messenger and WhatsApp before it can be implemented. While the company encourages using WhatsApp’s Signal protocol for encryption, it will accept other protocols if they meet the same security standards.

Dick Brouwer, Engineering Director at WhatsApp, detailed in a blog post:

To interoperate, third-party providers will sign an agreement with Messenger and/or WhatsApp and we’ll work together to enable interoperability. Today we’ll publish the WhatsApp Reference Offer for third-party providers which will outline what will be required to interoperate with the service.”

With the EU’s new rules coming into force today, Thursday, March 7, this means that Meta “must be ready to enable interoperability with other services within three months of receiving a request”, as dictated by the DMA. However, Brouwer cautions that turning on interoperability might take longer than three months before it’s ready for public use.

The DMA’s requirements also stipulate support for one-on-one chats and file sharing, including images, videos, or voice messages, in the initial year of the new regulation. Over time, these requirements will progressively expand to encompass group chats and calls.

How Precisely the Solution Will Work

Meta and WhatsApp stress that its approach to interoperability is “privacy-centric” and that the first step to achieving the objective is protecting the encryption protocol.

“Messenger is still rolling out E2EE (End-to-end encrypted)  by default for personal communication, but on WhatsApp, this default has been the case since 2016,” Meta wrote. “In both cases, we are using the Signal Protocol as the foundation for these E2EE communications, as it represents the current gold standard for E2EE chats.”

To prioritise user security, Meta’s preference is for third-party providers to leverage the Signal Protocol. However, ensuring compatibility for all users is critical, so Meta will permit third-party providers to employ a compatible protocol if they can demonstrate equivalent security assurances to Signal.

Third-party providers construct message structures encrypted with the Signal Protocol and packaged into XML stanzas for transmission. Meta servers push messages to connected clients via a persistent connection. Third-party servers then host client-sent media files, which Meta clients download using a Meta proxy service.

Meta highlights that its E2EE promise for messaging services necessitates control over both sending and receiving clients. This ensures that only the sender and intended recipients can access the sent content, preventing eavesdropping.

Although Meta has developed a secure interoperability solution using Signal Protocol encryption to safeguard messages in transit, without ownership of both clients, Meta insists it cannot guarantee how a third-party provider handles sent or received messages and thus cannot make the same assurance.

WhatsApp Becoming More and More Enterprise-Friendly

WhatsApp’s evolution into a comprehensive, enterprise-friendly communication and collaboration platform was a notable trend last year, and this interoperability update reinforces this development further.

Among the notable business-friendly features introduced last year, in December, WhatsApp introduced the functionality for users to pin a message to the top of their chats for up to 30 days.

That month, WhatsApp launched an enterprise-friendly voice chat upgrade, empowering users to host large groups of up to 128 audio-call participants. Distinct from a standard group call, this feature is designed to minimise disruptions. Unlike traditional WhatsApp group calls that ring every member, this version introduces an in-chat bubble on each participant’s screen, providing a more discreet invitation that users can tap to join.

In August, WhatsApp introduced a call scheduling feature within group chats, allowing WhatsApp group users to plan calls and automatically notify other participants, resulting in more convenient and efficient communication.

Even this January, WhatsApp for Windows’ beta teased a capability to control input and output devices within the application. Echoing similar capabilities in popular video conferencing platforms, such as Zoom and Google Meet, users can choose their preferred speakers, microphone or camera for voice and video calls without having to leave the app.



from UC Today https://ift.tt/3ZM4eyv