Signal has once again drawn a hard line. According to initial reports, the messaging app is refusing to comply with a UK proposal that would require devices sold or used in the country to scan for illegal imagery, packaged alongside mandatory age verification. Signal’s position is the same one its president, Meredith Whittaker, has stated for years: if a jurisdiction forces it to break end-to-end encryption, it will leave that market rather than ship a weakened product to everyone else.

This is not really a story about one bill. It is the latest round of a fight that has run through the UK’s Online Safety Act and the EU’s “Chat Control” debate — and the technical core of the disagreement matters more than the politics.

Why client-side scanning breaks the model

End-to-end encryption (E2EE) means only the sender and recipient can read a message; the service in the middle cannot. Client-side scanning tries to sidestep that by checking content on your device — before it is encrypted, or after it is decrypted — against a list of prohibited material.

Proponents frame this as “we’re not breaking encryption, we’re scanning before it applies.” Cryptographers have repeatedly rejected that framing for a simple reason: a scanner sitting inside your trusted endpoint, reporting on your messages, is a surveillance mechanism regardless of where the encryption boundary sits. Once that capability exists, three problems follow:

  • Scope creep. A system built to match one category of content can be silently re-pointed at another. The match list is controlled by whoever operates it.
  • False positives and chilling effects. Perceptual-hash and AI classifiers misfire. At population scale, even a tiny error rate generates large numbers of innocent people flagged.
  • A single point of failure. A mandated on-device scanner is a high-value target. Compromise it and you compromise everyone.

The EFF and a long list of security researchers have made versions of this argument for years: you cannot add an exceptional-access door for “the good guys” that stays shut for everyone else.

Signal’s line in the sand

Signal’s leverage is its credibility. It is a non-profit, its protocol is open and independently audited, and it has walked away from markets before rather than degrade its guarantees. That makes its “we will leave” threat believable in a way a commercial platform’s might not be.

The practical stakes are real. The Signal Protocol underpins not just Signal but the E2EE in WhatsApp and others. A mandate that forces scanning into one app sets precedent for the rest, and a patchwork of country-by-country scanning rules is exactly the fragmentation secure-messaging projects are built to resist.

What to watch

The open questions are whether the reported UK proposal advances into binding rules, whether it is paired with age-verification mandates that pull in even more identity data, and whether other governments cite it as precedent. For anyone building or relying on secure communications, the signal in the noise is consistent: the encryption debate has moved from “should messages be encrypted” to “can your own device be conscripted to report on you.” That is the line Signal is refusing to cross.