It appears that the U.K. government has discreetly removed encryption guidance from its official websites, just weeks after requesting backdoor access to encrypted data stored on Apple’s iCloud service.
This change was discovered by security expert Alec Muffet, who noted in a blog post that the U.K.’s National Cyber Security Centre (NCSC) is no longer advising high-risk individuals to utilize encryption for protecting sensitive information.
In October, the NCSC published a document titled “Cybersecurity tips for barristers, solicitors, and legal professionals,” which recommended the use of encryption tools, including Apple’s Advanced Data Protection (ADP).
ADP enables users to turn on end-to-end encryption for their iCloud backups, making it impossible for anyone, including Apple and government authorities, to access the stored data.
The original URL hosting the NCSC document now redirects to a different page that does not mention encryption or ADP, instead suggesting that at-risk individuals use Apple’s Lockdown Mode, an extreme security tool that limits access to certain functions and features.
According to Muffet, the original document, still accessible via the Wayback Machine, has been completely deleted from the internet. Upon searching, TechCrunch was unable to find any encryption advice on the U.K. government’s website.
The U.K. Home Office and NCSC have not responded to TechCrunch’s inquiries regarding this matter.
The removal of encryption advice comes after the U.K. government ordered Apple to create a backdoor to access users’ encrypted iCloud data.
Following this order, first reported by The Washington Post, Apple removed its ADP feature in the U.K. and confirmed to TechCrunch that the feature will no longer be available to new users in the U.K. and existing users will eventually need to disable it.
Apple is challenging the U.K.’s data access order in the Investigatory Powers Tribunal (IPT), as reported by The Financial Times.
Source Link