FSB requires internet companies to obtain keys from e-mails within 10 days

The other day, the FSB clarified the deadline for Internet companies to provide keys for decoding messages to users, Vedomosti reports. It is only 10 days. It is this time interval indicated in the draft order of the service, which is posted by the FSB on the portal for discussion of regulatory acts.

The first order of the Federal Security Service, describing the procedure for granting keys to decrypt messages, was published in the summer of 2016. The intelligence agency once developed it in pursuance of the anti-terrorism amendments, known as the “Spring Act”. According to the amendments, companies are obliged to provide law enforcement agencies with not only user correspondence, but also encryption keys to it in the event that the correspondence or files sent are encrypted.

According to the head of Roskomnadzor, Alexander Zharov, about 15-20% of the traffic on the RuNet is encrypted. Some of the companies represented on the Russian market fully encrypt the traffic of their services. These include the Gmail email service from Google, as well as Telegram and WhatsApp messengers.
')
In 2016, the order of the FSB did not specify specific dates for the provision of encryption keys. But in the document it was agreed that the request from the service must be executed in writing by registered mail. Now the special service clarified that the transfer of the request can be carried out using the "technical means of communication." Among other things, the FSB also clarified that information from Internet companies will be collected by the Center for operational and technical activities of the FSB.

According to experts , to fulfill the orders of the order will not be easy. In particular, Karen Ghazaryan, an analyst at the Russian Association of Electronic Communications, believes that most modern services that use encryption methods do not store session encryption keys on their servers.

In most cases, these keys are saved only by the user. However, messenger operators can also have keys that are used to establish a connection, as well as transfer service information.