GSMA Initiates Full Encryption for Cross-Platform RCS Messaging

Sep 18, 2024Ravie LakshmananMobile Security / Encryption

The GSM Association, the overseeing body that supervises the advancement of the Rich Communications Services (RCS) protocol, announced on Tuesday its ongoing effort to introduce full encryption (E2EE) to safeguard messages exchanged between the Android and iOS ecosystems.

“The forthcoming significant achievement for the RCS Universal Profile involves incorporating essential user protections such as cross-platform end-to-end encryption,” mentioned Tom Van Pelt, the technical director of GSMA, in a statement.

“This will mark the premiere deployment of standardized, interoperable messaging encryption across diverse computing platforms, dealing with noteworthy technical hurdles like key federation and crypto-enforced group membership.”

The development follows Apple’s recent release of iOS 18 with integration of RCS in its Messages app, providing advanced functionalities like message reactions, typing indicators, read receipts, and superior media sharing, among others.

While the current SMS standard lacks end-to-end encryption by default, Google took steps to apply the Signal protocol to secure RCS interactions on Android.

Earlier this year, Apple stated its intention to collaborate with GSMA members to include encryption. It is noteworthy that the company’s exclusive iMessage service already supports E2EE.

“We are excited to continue our partnership across the mobile ecosystem to enhance the RCS standard with cross-compatible end-to-end encryption to maintain privacy and security for all RCS communications,” Van Pelt added.

Last July, Google also announced intentions to integrate the Message Layer Security (MLS) protocol into its Messages app for Android to facilitate operability among messaging services and platforms.

Recent updates from Meta outlined its strategy to enable compatibility with third-party messaging services in WhatsApp and Facebook Messenger, in line with efforts to adhere to the E.U. Digital Markets Act (DMA) while ensuring E2EE assurances “to the utmost extent feasible.”

“Developing third-party chats is technically intricate, and ensuring privacy and security is a shared duty,” as mentioned by the social media corporation in a communication. “We have made significant progress, yet there is much more work ahead.”