Officials with Europol outlined why Home Routing is a security concern.
Home Routing is a feature telecommunication companies use to let users route calls through their home network while abroad, which isn’t dangerous on its own. However, Europol points out that when paired with end-to-end encryption services, it can make it much harder for law enforcement to collect actionable evidence against a suspect.
End-to-end encryption can be used to transmit encrypted data from abroad using another person’s home network without leaving a provable digital footprint. It also allows criminals to move under the radar without worrying about their messages being intercepted.
“Encryption represents an important means of securing private communications. However, at the same time, it also enables threat actors to manage their malicious activities below the radar of law enforcement,” Europol writes in a report.
“Once Home Routing is deployed, any suspect using a foreign SIM card can no longer be intercepted.” This allows foreign hackers to pretend they’re sending messages from another country and domestic criminals to hide evidence.
The agency’s solution to the problem is to prevent telecom companies from allowing users the option of enabling end-to-end encryption.
“The only current exception for this is when a domestic service provider (to whom domestic interception orders can be sent) has in place a cooperation agreement which disables PET in Home Routing with the service provider of another country,” Europol said.
This would aid law enforcement agencies during investigations, but make it less secure for users to connect to their home network from abroad. Some critics consider it a walk back in privacy security.
While that’s the solution they proposed, the report also indicates that the agency is open to proposals and is willing to find better solutions to the problem. They want to find a “balance” between enhancing someones digital security and exploiting privacy features to commit crimes.
There have been no official laws or policies passed yet.