Gauging Support for Cross-Platform E2EE RCS Messaging on UK Mobile Operators UPDATE
Google and Apple recently began bringing cross-platform end-to-end encryption to Rich Communication Services (RCS), which is a data-only messaging service that’s intended to replace traditional SMS text messaging (you need a mobile internet / broadband connection for it to work). But it’s not yet fully available from all UK mobile operators.
The move to make the service more secure and private began over a week ago after cross-platform E2EE RCS started rolling out in beta for iPhone users running iOS 26.5+ with supported carriers, while Android users on the latest version of Google Messages can already access the same feature. Encryption is designed to be on by default and will be automatically enabled over time for new and existing RCS conversations.
As it stands, of the primary UK mobile operators, both EE (inc. BT Mobile) and Three UK have already introduced beta support for the cross-platform feature on both iOS and Android devices (support among their respective virtual operators is currently unclear or non-existent). On the flip side, a spokesperson for O2 informed ISPreview that the feature was “something we’re keen to support in [the] future“, but sadly they couldn’t provide a clear timescale.
Advertisement
The situation around Vodafone is a little bit more complex, due to the merger with Three UK (VodafoneThree). As above, Three already supports the cross-platform upgrade, but Vodafone itself does not (i.e. E2EE RCS only works Android to Android) – partly due to operating their own RCS infrastructure (instead of using Google’s platform). We did query this with Vodafone yesterday, but have yet to receive a reply and will update this article when or if that changes.
Suffice to say that some mobile operators still have a bit of work left to do on cross-platform E2EE RCS integration. Meanwhile, the UK government continues to view the additional privacy features introduced by E2EE messaging services as being a fundamental threat to public safety (here), while continuing to demand backdoors for security services with proper legal authority. But as recent compromises of global telecoms networks show (e.g. Salt Typhoon), legally mandated backdoors can end up being exploited by hackers.
UPDATE 8:51am
Vodafone have informed that they’re not yet in a position to comment.
Advertisement
Mark is a professional technology writer, IT consultant and computer engineer from Dorset (England), he also founded ISPreview in 1999 and enjoys analysing the latest telecoms and broadband developments. Find me on X (Twitter), Mastodon, Facebook, BlueSky, Threads.net and Linkedin.
« Openreach Reach 7,000 Electric Vehicles as Part of UK Fleet Transition
Ofcom in their recent statement did not rule out abusing Technology Notices to essentially ban E2EE. One saving grace, unlike the government’s abuse of RIPA (e.g. the ban on Apple’s storage encryption technology), abuse conducted under OSA will be done in public not secret. So at least we will know which applications Ofcom have compromised. Whatsapp and Signal have both said they will leave the UK market if required to compromise their application. So it will be interesting to see if they actually do it and what is the consequent backlash for the government.
https://www.ofcom.org.uk/online-safety/illegal-and-harmful-content/consultation-technology-notices
Ofcom is one of the most powerful quangos in the UK. It needs to be dismantled.
The problem isn’t Ofcom itself, it’s the directives they receive from the government (or in some cases.. the lack of a clear directive or direction). You can’t abolish Ofcom without leaving several markets without regulation, so you’d end up replacing it with another organisation of a different name, but doing the same thing.
O2 are clowns. They can’t get anything right.
I agree with Mark
Quangos that have changed name so far
Health Protection and Security Agency
Integrated Care Boards
Competition And Markets Authority
Still don’t use RCS, for a start I don’t like Google messaging app and secondly, I don’t have any need for RCS, SMS does what I require.
I don’t really need to know when someone is typing a message, all I need to know is when the message gets to me and when the message I sent is delivered.
As for E2EE, do you really trust Google? Not that I send anything that important over text anyway.