Why End-to-End Encryption, especially during Covid-19 Pandemic.

By Josephine Nampala | I had an opportunity of being one of the Encryption trainees in the “2020 Chapters Training Programme.” The programme focused on developing new community leaders who can work together with their respective Chapters and create local awareness of Encryption. The programme helped me appreciate the role of End-to-End Encryption and I thought of sharing ideas of how we can utilise it especially during this time of the corona pandemic!

As many people are opting to work from home due to the ongoing pandemic, online activities are greatly increasing. In times of uncertainty like these ones, it is important to control all sensitive online communications on a secure and encrypted platform. Effective encryption is a foundation for us to build trust on the Internet.

One may ask, why Encryption? Is it important? Most people are not bothered about how their information is transmitted online and who could be viewing their information illegally. 

Encryption is the process of scrambling or enciphering data so it can be read only by someone with the means to return it to its original state. It is what makes data secure. It is commonly used to protect both data stored on computer systems(data-at-rest), and data transmitted via computer networks, including the Internet(data-in-transit).

End-to-end encryption(E2E), where only the sender and intended recipient can read the message, is the most secure form of encryption that you can use. It is always important to use end-to-end encryption to protect yourself and your data. One example of an encrypted service that people are most accustomed to in Uganda is WhatsApp platform, where E2E is always activated. 

In this Covid-19 pandemic, of which we are uncertain when it will come to an end, we are getting to realise that life must move on! With the social distancing that is required to control the pandemic, many enterprises, both small and big are opting to operate remotely. This remote operation of course requires the internet for effective communication within any organization! 

Encryption is a key building block of Internet trust. It is important to check that user data is not being exposed, and that the organisation’s data is not being tampered with by a wrong party.  One needs to be sure of who they are communicating with for example through signing digital documents to ensure that the recipient is authentic and that certainly the message is coming from the right sender.

Some are under the mistaken belief that encryption, and the resulting security and privacy of our data, are not that important if we do not have anything to hide. But if your data falls into the wrong hands, it can be used to damage your reputation, hurt you financially, for example, identity theft impersonating you, redirecting a financial payment as well as exposing private aspects of your life to the world.

Some state actors  have argued against end-to-end (E2E) encryption with claims that it prevents law enforcement and national security agencies from doing their jobs of identifying criminals, terrorists and others planning or taking actions that endanger us all so they can be stopped. 

In Uganda, there is little conversation on the importance of encryption and no specific law promoting data encryption. However, the Electronic Signatures Act, 2011  provides for regulation of the use of electronic signatures and for other related matters. 

Can’t we do more than the Electronic signatures? Yes, we can! Strong encryption is fundamental to the safe and efficient operation of key aspects of our society, and our lives including law enforcement and national security agencies as well as business operations.

As individuals and organisations, we can start with what is within our reach, for example, using secured web browsers that use HTTPS, an encrypted protocol and using secured messaging applications with End-to-End Encryption embedded.

We need to be sensitive about our privacy online! We trust companies to protect our financial information when we buy things online or use online banking. As a user of the company’s services, do I really care whether these companies keep my information and online transactions private through strong End-to-End Encryption tools?  As an enterprise owner or director, have I taken initiative to find out the appropriate End-to-End Encryption tools for my business? As government policy makers, are we promoting the use of end-to-end encryption to protect networks, communications, and data?

In this crisis, many people are trying so much to keep close to their loved ones through different online platforms for example messaging and video conferencing applications. Do we ever stop and think that a third party could be tapping our conversations? Encryption especially End-to-End Encryption has got you covered! It is important to opt for applications that support End to End Encryption to maintain privacy of our communications while in transit.