Research paper argues current ‘going dark' debate misrepresents end-to-end encryption realities

A new academic paper revisits the long-running ‘Going Dark' debate, arguing that current controversies over end-to-end encryption (E2EE) are rooted in misconceptions about how E2EE functions in practice. The paper, titled “Encryption and Globalization 15 Years Later: End-to-End Encryption and the Third Round of the ‘Going Dark' Debate,” updates prior research and frames the debate as ‘Round 3' of a recurring policy conflict.

The authors identify five technically distinct scenarios in which E2EE operates in practice, each with different implications for lawful access. These scenarios include true E2EE, cloud backup, SaaS, on-device scanning, and the Ghost protocol. The paper argues that these distinctions reveal a substantial gap between the assumption that E2EE categorically blocks lawful access and the reality of how modern communications are sent and received.

The paper further argues that E2EE is not limited to messaging but is embedded throughout the modern technology stack, including in Transport Layer Security, Secure Shell, Virtual Private Networks, and Zero Trust Architecture. It notes that Zero Trust Architecture is now legally required under U.S. and EU law, implying that broad restrictions on E2EE would have severe consequences for cybersecurity, commerce, and government operations.

The authors conclude that two key lessons from earlier rounds of the debate—the ‘least trusted country problem' and the ‘golden age of surveillance'—remain relevant in the current context. They argue that new government claims for restricting effective encryption deserve great skepticism, given the demonstrated risks of weakening encryption across critical systems.