[MrMullen]

At my last job, about 2/3 of the company was in the US and 1/3 was in China. Members of the China IT and Developer teams were always trying to get the US teams to put WeChat on our phones so they could send us questions and we always refused. They thought it was because we did not want them to send us questions after hours, but someone finally told one of the China Developers, while they visiting a US office, that no American would put WeChat on their phone because Americans considered everything WeChat handled to be accessible by the Chinese government. We did not want our calls and messages to be spied on by the Chinese government. We would not even tell them that over the phone because Americans just assumed that the Chinese government listens in on all calls to China.

[schoen]

I think your concern was appropriate, but it reminds me of the corresponding view that many people have that communications software developed in the U.S. will inevitably have backdoors for the U.S. government. That view feels reasonable to them because they know the U.S. government is also extremely aggressive about surveillance capabilities.

I find it sad that we're in an environment where assuaging these concerns can be a complicated and difficult undertaking, and even trying to understand the landscape is a big challenge. Lots of people see it as risky to use technology developed in another country, and while some particular fears and theories are overblown, it's hard to dismiss the overall concern.

[mikeash]

The US tries to keep its surveillance secret. Seems to me that this makes it unlikely that they'll backdoor apps, because random hackers might reverse engineer the apps and discover and publicize the backdoors. Instead, the US backdoors communications lines and data centers, or uses existing security holes to break into targets.

China doesn't keep its surveillance a secret. They don't go out of their way to publicize it, but they don't seem to care if people know it's there. A backdoor in an app would fit their style better.

[dmix]

I'm curious if they'd take a similar position about using phone calls/SMS or any non-encrypted HTTP communication to UK which are 100% being intercepted.