Feeds

RIM gets another Indian reprieve

Terrorists dash to their BlackBerrys for three-month free-for-all

Internet Security Threat Report 2014

India won't ban BlackBerrys until next year, allowing RIM another three months to arrange lawful intercept, though the decision is not the good news it sounds.

RIM's problem isn't time, it's the impossibility of providing a solution acceptable to politicians keen to be seen doing something, and enterprises reliant on RIM's impenetrable security model. RIM's only hope is to spend the time trying to convince the politicians that what they want just isn't possible, as it has managed in the United Arab Emirates. But the very fact that the ban has been postponed means that effort has so far failed.

RIM was originally required to provide Indian security forces access by the end of August, or face a ban. Days before the ban came into effect, RIM was given another 60 days. This has now been extended until January*, with the Indian government saying that it will ask network operators to block communication with BlackBerry devices unless RIM can arrange for lawful intercept of communications by that time.

RIM has apparently already offered access to instant messaging, and web browsing sessions, initially after the event but switching to real time in the next couple of months. That can be achieved by putting a RIM server in the country, and thus subject to local laws on lawful intercept. That was enough for the government of the United Arab Emirates, which has rescinded its own threatened block.

But India wants to be able to read email sent and received on BlackBerry handsets. RIM's security model encrypts the mail on the BlackBerry Enterprise Server (BES) using a key that is only shared between the BES and the handset, making that very difficult. If the BES is run by RIM then the company can intercept messages, but if the BES is run by an enterprise then RIM has no access to the keys and can't provide access to the messages.

Nokia has been quick to capitalise on the situation, citing Ovi Mail servers within India and promoting its compliance. The same solution will work for Hotmail, Google Mail and similar hosted services, but won't work for Skype or other peer-to-peer services that encrypt end to end, including RIM's BES mail.

So while an extension might seem like good news, it actually reflects the intransigence of both sides. It also extends the agony as RIM stands alone calling for industry unity, and the industry watches to see who is going to blink first - RIM or the Indian government.

* The exact date isn't clear at the moment. We've asked for clarification and will update when we have it. ®

Beginner's guide to SSL certificates

More from The Register

next story
Download alert: Nearly ALL top 100 Android, iOS paid apps hacked
Attack of the Clones? Yeah, but much, much scarier – report
Broadband sellers in the UK are UP TO no good, says Which?
Speedy network claims only apply to 10% of customers
Virgin Media struck dumb by NATIONWIDE packet loss balls-up
Turning it off and on again fixes glitch 12 HOURS LATER
Yahoo! blames! MONSTER! email! OUTAGE! on! CUT! CABLE! bungle!
Weekend woe for BT as telco struggles to restore service
Fujitsu CTO: We'll be 3D-printing tech execs in 15 years
Fleshy techie disses network neutrality, helmet-less motorcyclists
Facebook, working on Facebook at Work, works on Facebook. At Work
You don't want your cat or drunk pics at the office
Soz, web devs: Google snatches its Wallet off the table
Killing off web service in 3 months... but app-happy bonkers are fine
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
5 critical considerations for enterprise cloud backup
Key considerations when evaluating cloud backup solutions to ensure adequate protection security and availability of enterprise data.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Simplify SSL certificate management across the enterprise
Simple steps to take control of SSL across the enterprise, and recommendations for a management platform for full visibility and single-point of control for these Certificates.