A technical critique on why even a well-intentioned effort to build a client-side scanning system for messaging will break key promises of end-to-end encryption
Erica Portnoy / Electronic Frontier Foundation : Tweets: @eff and @matthew_d_green Tweets: @eff : It's impossible to build a client-side scanning system that can only be used for CEI. Here's why: https://eff.org/... Matthew Green / @matthew_d_green : The EFF has a piece out on how client-side scanning ‘breaks’ end-to-end encryption. They take a pretty strong position here (one I happen to agree with.) But I thought it would be helpful to explain my specific technical concerns. Thread: 1/ https://www.eff.org/...
Context & Ripple Effects
Erica Portnoy's EFF piece, endorsed by cryptographer Matthew Green in his own thread of technical concerns, makes a narrow claim with wide reach: a client-side scanning system built for one purpose (CEI) cannot technically be constrained to that purpose, so deploying one breaks the guarantees end-to-end encryption was supposed to make. Green's public agreement matters because it moves the argument from advocacy to cryptography.
The critique lands at the start of a multi-year policy fight: within a year, [[a:958897|Five Eyes governments plus India and Japan were formally calling for backdoors into encrypted products]], and by 2021 Apple proposed exactly the kind of on-device scanning the EFF warned about — which critics including Stratechery argued belonged on iCloud servers instead, where privacy expectations are lower.
First-order effects
- Any messaging provider weighing a client-side scanning proposal now faces a published technical argument that the mechanism is inherently repurposable, not just an objection to this particular use case.
- Green's endorsement gives the EFF position independent cryptographic credibility, forcing proponents of scanning to rebut specific technical claims rather than dismiss civil-liberties framing.
Second-order effects
- Governments pushing for access lose their cleanest talking point — 'scan only for child abuse imagery' — because the EFF-Green argument says the tooling cannot be so limited, sharpening the conflict over the Five Eyes backdoor agenda.
- Platforms already running detection, like WhatsApp's approach to finding abuse material, come under pressure to show why their methods don't replicate the on-device scanning structure the EFF rejects.
Third-order effects
- If the critique holds, the industry bifurcates between server-side scanning (the compromise Stratechery suggested for Apple's CSAM plan) and refusing to scan at all, turning the strength of E2EE promises into a competitive differentiator among messengers.
- Regulators seeking a middle path will keep gravitating toward client-side scanning precisely because it sounds narrower than a backdoor — meaning this technical debate, not legislation, becomes the real battleground over whether E2EE keeps its meaning.
The trend: The encryption-access fight is migrating from overt backdoor demands to client-side scanning pitched as a compromise, with security researchers drawing the technical line that determines whether end-to-end encryption remains a meaningful promise.