Is Congress All Bark and No Bite on Encryption?

Senate Intelligence Committee Chairman Richard Burr talks with National Security Agency Director Adm. Michael Rogers on Capitol Hill on Sept. 24.

Senate Intelligence Committee Chairman Richard Burr talks with National Security Agency Director Adm. Michael Rogers on Capitol Hill on Sept. 24. Pablo Martinez Monsivais/AP

Even critics of the tech industry aren’t quite sure how to guarantee government access to terrorist communications.

Major tra­gedies have a way of shift­ing the le­gis­lat­ive pro­cess in­to hy­per speed. Con­gress passed the Pat­ri­ot Act, for ex­ample, just a little more than a month after the Sept. 11 ter­ror­ist at­tacks. More re­cently, the House draf­ted and passed a bill to lim­it Syr­i­an and Ir­aqi refugees just days after the ter­ror­ist at­tacks in Par­is.  

While the Par­is at­tacks have also re­ignited a de­bate over en­cryp­tion, con­gres­sion­al aides and cy­ber­se­cur­ity ex­perts doubt that at­ten­tion will trans­late in­to ac­tion any time soon.

“I don’t see any­thing im­min­ent,” one House aide fa­mil­i­ar with the is­sue said. “The same mech­an­ics that blocked a le­gis­lat­ive path for­ward a month ago block it today.”

CIA Dir­ect­or John Bren­nan and Sens. Richard Burr and Di­anne Fein­stein, the bi­par­tis­an lead­ers of the Sen­ate In­tel­li­gence Com­mit­tee, all ar­gued last week that en­cryp­ted ser­vices are em­power­ing ter­ror­ists to evade sur­veil­lance.

“I think the biggest threat today is the idea that ter­ror­ists can com­mu­nic­ate in dark space, dark plat­forms, and we can’t see what they’re say­ing. … If you can’t see what they’re say­ing it is very dif­fi­cult to stop it,” House Home­land Se­cur­ity Chair­man Mi­chael Mc­Caul said on CBS’s Face the Na­tion on Sunday.

But any le­gis­la­tion to en­sure the gov­ern­ment can ac­cess en­cryp­ted com­mu­nic­a­tions would face fierce res­ist­ance from the tech­no­logy in­dustry. Com­pan­ies like Apple, Google, and Face­book ar­gue that a “back­door” for the U.S. gov­ern­ment could also be ex­ploited by hack­ers or op­press­ive re­gimes, ul­ti­mately un­der­min­ing trust in their ser­vices. And, they ar­gue, it wouldn’t even help thwart at­tacks be­cause ter­ror­ists would just switch to for­eign ser­vices that could re­main en­cryp­ted.

Jason Healey, a cy­ber­se­cur­ity schol­ar at Columbia Uni­versity’s School of In­ter­na­tion­al and Pub­lic Af­fairs, said that tech­no­logy com­pan­ies already feel burned by the scope of sur­veil­lance re­vealed by Ed­ward Snowden. They would be a ma­jor obstacle to passing any le­gis­la­tion that would un­der­mine en­cryp­tion, he said.

“I would be very sur­prised if you see any sig­ni­fic­ant ac­tion hap­pen­ing quickly,” Healey said. “It’s easy to pass a bill on refugees be­cause they don’t have mil­lions of dol­lar of lob­by­ists in there ar­guing for them.”

Burr, at least, doesn’t care much about pleas­ing the tech com­pan­ies. “We don’t have a re­spons­ib­il­ity to sell their products. We have a re­spons­ib­il­ity to keep Amer­ica safe,” Burr said at a press con­fer­ence last week.

But even he and Fein­stein ac­know­ledge that en­cryp­tion is a tech­no­lo­gic­ally com­plic­ated is­sue, and they are wary of mov­ing too quickly.

“I wouldn’t dare even re­motely make you be­lieve we’re on a le­gis­lat­ive route. We’re on an ex­plor­at­ory route,” Burr said at the same press con­fer­ence. No law­maker has un­veiled a bill yet that would man­date gov­ern­ment ac­cess to en­cryp­ted com­mu­nic­a­tions.

“Look at both of us, look at our age,” the 59 year-old Burr said as he ges­tured to­ward the 82 year-old Fein­stein. “This is a very dif­fi­cult thing for us to un­der­stand be­cause I won’t tell you that we are steeped in tech­no­logy.” (Fein­stein shot back: “Speak for your­self!”)

FBI Dir­ect­or James Comey has been warn­ing about the risks of ter­ror­ists and crim­in­als us­ing en­cryp­tion to “go dark” from sur­veil­lance for more than a year. But last month, after an ex­tens­ive in­tern­al de­lib­er­a­tion, the White House said it would not seek le­gis­la­tion to com­pel com­pan­ies to provide ac­cess to their en­cryp­ted com­mu­nic­a­tions. White House aides have de­clined to re­vise that state­ment in the wake of the Par­is at­tacks.

Sen. Ron Wyden, an Ore­gon Demo­crat and long­time pri­vacy ad­voc­ate, has been lead­ing the charge in Con­gress against any ef­fort to weak­en en­cryp­tion.

“I am stand­ing up against these dan­ger­ous pro­pos­als to en­sure we act based on the facts, not fear, in the days ahead,” he wrote Monday in a blog post titled “En­cryp­tion Is Not the En­emy.”

Re­ports in French me­dia that the ter­ror­ists sent un­en­cryp­ted text mes­sages as they car­ried out their at­tacks have also sapped the se­cur­ity hawks of some of their mo­mentum.

Jim Lewis, a seni­or fel­low at the Cen­ter for Stra­tegic and In­ter­na­tion­al Stud­ies, ar­gued that any solu­tion will re­quire co­ordin­a­tion with oth­er coun­tries and the tech com­pan­ies.

“It’s been such a heated dis­cus­sion, the tem­per­at­ure needs to go down, people need to take a deep breath,” he said.

He also noted that the com­pet­ing jur­is­dic­tions of sev­er­al con­gres­sion­al com­mit­tees over the is­sue would mean a long road ahead on Cap­it­ol Hill.

“If we start now, check back in three years,” he said.

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.