[teekert]

"Only non-commercial services that are not ad-funded, such as many open source software, are out of scope"

So, what's the use of this law anyway?

I do wonder what open source means though. Is Signal opensource? The client is, the server is not... Matrix is fully open source... And Whatsapp (which my country runs on) which has open source encryption...?

[rvense]

So I can set up a server for my family and do no scanning, and that's not illegal. Can I let my neighbour join. How far down the street am I allowed to offer this service before it becomes in scope? Can I make a preconfigured, plug-and-play appliance that runs an encrypted chat server on a home internet connection and give that to someone I know? Someone I don't know?

This is one of those extremely frustrating laws that's just going to hit everyone EXCEPT the ones who deserve it.

[quectophoton]

Thinking like I want to take advantage of the letter of the law:

> "End-to-end encrypted messenger services are not excluded from the scope"

This was probably added precisely to include Signal, XMPP with OMEMO, etc.

> "Hosting services affected include web hosting, social media, video streaming services, file hosting and cloud services"

So not even self-hosting NAS, since this probably will be interpreted as "sharing with your family is still providing a file hosting service to them".