Interoperability: WhatsApp and Messenger to Adopt Signal Protocol in Compliance with DMA

In response to the Digital Markets Act (DMA) set by the EU, Meta unveils its strategy to ensure interoperability between its messaging platforms, WhatsApp and Messenger, and third-party services. This move aims to adhere to regulatory requirements while maintaining user privacy and security standards. The EU’s DMA went into effect at the end of 2022 and begun enforcement into 2023. This has seen Apple come up with the USB-C charger for its latest iPhones as well as changes to its default browser options in the latest iOS 17.4 release. Meta is now the latest tech company to announce its own interoperability plans to allow for its users to be able to migrate or share their data with other non-Meta platforms.

Previously announced as an opt-in feature, Meta clarifies that engaging with third-party chats will require user consent to mitigate potential spam and scams. Further explaining how it works, Meta outlines the necessity for third-party developers to adhere to specific protocols, primarily the Signal protocol, which has robust encryption capabilities. All Meta platforms already have end to end encryption in place to address privacy concerns.

Emphasizing the security benefits of the Signal protocol, Meta underscores its preference for third parties to adopt the same standard. With both WhatsApp and Messenger employing end-to-end encryption (E2EE) based on Signal, Meta aims to uphold the gold standard in E2EE chats across its platforms.

Technical details regarding encryption implementation reveal a sophisticated process involving the construction of message protobuf structures encrypted via Signal. Meta’s servers facilitate message delivery to connected clients, ensuring secure transmission and reception of messages.

In addressing concerns about media files, Meta stipulates that third parties will be responsible for hosting images and videos sent via their client apps. Media content will be encrypted and transmitted securely through Meta’s infrastructure, enhancing user privacy.

Despite assurances of message security in transit, Meta acknowledges limitations in guaranteeing the handling of messages by third-party providers. This cautious stance reflects Meta’s commitment to maintaining user trust while navigating regulatory compliance.

Meta’s approach underscores its role in dictating interoperability standards, leveraging its existing infrastructure to facilitate seamless integration. While prioritizing reliability and scalability, Meta explores alternative solutions to streamline third-party participation without compromising user safety.

Meta announces the requirement for third-party providers to sign agreements outlining terms of interoperability. By publishing reference offers for WhatsApp and Messenger, Meta aims to establish clear guidelines for potential partners.

Meta’s proactive stance towards interoperability demonstrates its commitment to regulatory compliance and user privacy. As the landscape of digital communication evolves, Meta remains dedicated to fostering an open ecosystem while safeguarding user interests.