Google and Apple recently began bringing cross-platform end-to-end encryption to Rich Communication Services (RCS), which is a data-only messaging service that’s intended to replace traditional SMS text messaging (you need a mobile internet / broadband connection for it to work). But it’s not yet fully available from all UK mobile operators.
The move to make the service more secure and private began over a week ago after cross-platform E2EE RCS started rolling out in beta for iPhone users running iOS 26.5+ with supported carriers, while Android users on the latest version of Google Messages can already access the same feature. Encryption is designed to be on by default and will be automatically enabled over time for new and existing RCS conversations.
As it stands, of the primary UK mobile operators, both EE (inc. BT Mobile) and Three UK have already introduced beta support for the cross-platform feature on both iOS and Android devices (support among their respective virtual operators is currently unclear or non-existent). On the flip side, a spokesperson for O2 informed ISPreview that the feature was “something we’re keen to support in [the] future“, but sadly they couldn’t provide a clear timescale.
Advertisement
The situation around Vodafone is a little bit more complex, due to the merger with Three UK (VodafoneThree). As above, Three already supports the cross-platform upgrade, but Vodafone itself does not (i.e. E2EE RCS only works Android to Android) – partly due to operating their own RCS infrastructure (instead of using Google’s platform). We did query this with Vodafone yesterday, but have yet to receive a reply and will update this article when or if that changes.
Suffice to say that some mobile operators still have a bit of work left to do on cross-platform E2EE RCS integration. Meanwhile, the UK government continues to view the additional privacy features introduced by E2EE messaging services as being a fundamental threat to public safety (here), while continuing to demand backdoors for security services with proper legal authority. But as recent compromises of global telecoms networks show (e.g. Salt Typhoon), legally mandated backdoors can end up being exploited by hackers.
UPDATE 8:51am
Vodafone have informed that they’re not yet in a position to comment.
Advertisement
Advertisement
Ofcom in their recent statement did not rule out abusing Technology Notices to essentially ban E2EE. One saving grace, unlike the government’s abuse of RIPA (e.g. the ban on Apple’s storage encryption technology), abuse conducted under OSA will be done in public not secret. So at least we will know which applications Ofcom have compromised. Whatsapp and Signal have both said they will leave the UK market if required to compromise their application. So it will be interesting to see if they actually do it and what is the consequent backlash for the government.
https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/consultation-technology-notices
Ofcom is one of the most powerful quangos in the UK. It needs to be dismantled.
The problem isn’t Ofcom itself, it’s the directives they receive from the government (or in some cases.. the lack of a clear directive or direction). You can’t abolish Ofcom without leaving several markets without regulation, so you’d end up replacing it with another organisation of a different name, but doing the same thing.
O2 are clowns. They can’t get anything right.
Comments RSS Feed
Your email address will not be published.
Comment moderation is enabled. Your comment may take some time to appear.
