US subpoena tests privacy promise of encrypted messaging app

October 4, 2016 by Raphael Satter
This photograph taken Tuesday Oct. 4, 2016 shows the Signal encrypted messaging app loading on a smartphone in Paris. Open Whisper Systems, the company behind Signal, was subpoenaed for information about one of its users earlier this year, according to legal correspondence released Tuesday by the American Civil Liberties Union. (AP Photo/Raphael Satter)

The company responsible for spreading top-of-the-line message encryption across the internet has had a first legal skirmish with the U.S. government.

Open Whisper Systems—whose Signal app pioneered the end-to-end encryption technique now used by a swath of messaging services—was subpoenaed for information about one of its users earlier this year, according to legal correspondence released Tuesday. The American Civil Liberties Union, which represented the company, said the small San Francisco firm didn't produce the user's name, address, call logs or other details requested by the government.

"That's not because Signal chose not to provide logs of information," ACLU lawyer Brett Kaufman said in a telephone interview. "It's just that it couldn't."

Created by anarchist yachtsman Moxie Marlinspike and a crew of surf-happy developers, Signal has evolved from a niche app used by dissidents and protest leaders into the foundation stone for the encryption of huge tranches of the world's communications data. When any one of WhatsApp's billion-plus users sees a discreet lock icon with the words, "Messages you send to this chat and calls are now secured with end-to-end encryption," they have Signal to thank . Facebook's recently launched private chat feature, Secret Conversations , uses Signal's technology; so too does the incognito mode on Google's messenger service Allo.

Signal remains a favorite among security-minded users, among them National Security Agency leaker Edward Snowden. A key selling point has been Open Whisper Systems' refusal to retain nearly any form of metadata—the often revealing who-how-when-where of calls and messages.

"We try to have as little information as possible," Marlinspike said in an interview (over Signal, naturally.)

Kaufman said that the request—and Signal's response to it—was a model for companies hoping to insulate themselves from the fraught process of handing over their customers' data.

"We hope it's an example for other companies how they can continue to stand for customers' privacy," he said.

Explore further: WhatsApp messages get end-to-end encryption

More information: Legal correspondence released by the ACLU: … acted-Documents.html

Related Stories

Facebook Messenger to offer strong encryption

July 8, 2016

Facebook announced Friday it would roll out optional "end to end encryption" for its Messenger application, following a trend aimed at stronger security and protection against snooping.

WhatsApp is going to share your phone number with Facebook

August 25, 2016

Global messaging service WhatsApp says it will start sharing the phone numbers of its users with Facebook, its parent company. That means WhatsApp users could soon start seeing more targeted ads and Facebook friend suggestions ...

Recommended for you

Semimetals are high conductors

March 18, 2019

Researchers in China and at UC Davis have measured high conductivity in very thin layers of niobium arsenide, a type of material called a Weyl semimetal. The material has about three times the conductivity of copper at room ...


Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.