France promises no encryption backdoors while asking to scrap the law that bans them

What the minister promised

During a National Assembly debate on November 9, 2026, France's digital minister Anne Le Hénanff made two commitments, as reported by a dev.to analysis that draws on French coverage from Korben and Nikopik. First, the government will not require messaging platforms to build backdoors into encrypted conversations, at least until the end of the current parliamentary session. Second, the government supports removing Article 16 bis, a clause the Senate inserted into the pending resilience bill that would ban that kind of access in law.

The dev.to author argues that, read together, the second commitment undercuts the first: a temporary promise of restraint, paired with an effort to delete a permanent legal prohibition, changes the timetable rather than the policy.

How the standoff developed

The fight began with France's 2025 narcotrafficking law, when a Senate amendment, backed by the government at the time, sought to compel WhatsApp, Signal, Telegram, Messenger and the French app Olvid to hand over the messages of people under surveillance, even when those messages were encrypted. Publishers pushed back and the National Assembly stripped the measure out.

Senators responded by writing the opposite into the resilience bill: a ban on backdoors, codified as Article 16 bis. That bill, which mostly transposes three European directives including NIS2, has been stalled for over a year. It passed in committee in September 2025, and according to the post France now faces referral to the European Court of Justice over the delay. The head of ANSSI, the agency that defends the French state against cyberattacks, has said the bill's measures would have prevented a good part of the data thefts the administration suffered in recent months.

Encryption was the sticking point. Deputy Florent Boudie was handed a mediation mission in January, nominally three months long; it took eight. His report recommends abandoning backdoors and removing Article 16 bis, while simultaneously asking the state to work on what it calls "targeted access to protected content" that would not weaken encryption.

Why 'targeted access' is contested

The dev.to author, who says they build encrypted messengers, argues that this phrase describes something that technically cannot exist. In end-to-end encryption, the keys sit on the devices in the conversation and the server relays ciphertext it cannot read. Giving any third party a way in requires creating a key, and any key that exists can be stolen, copied, leaked or demanded by someone else. The head of Olvid has led the same argument in France, and Signal president Meredith Whittaker has said she would rather see Signal leave France than introduce the slightest access, on the reasoning that access is binary: it either exists or it does not.

Rising demand for access

The post also points to the demand side of the equation. The head of the DGSI, France's domestic intelligence service, warned in September 2025 about the "programmed blindness" of her services, and the CNCTR, the authority that oversees surveillance techniques, reports that requests to break into phones have more than doubled in four years, becoming almost routine.

The author frames this as a repeating international pattern rather than a French exception. The UK previously floated "ghost participants," the idea of silently adding a government listener to a group chat, and the EU has debated client-side scanning. Each proposal renames the same underlying demand: a way in that does not officially count as a backdoor.

Why it matters

For messaging apps and their users, the immediate risk has been deferred rather than resolved. The pledge not to mandate backdoors expires with the parliamentary session, while the push to repeal Article 16 bis would remove the legal barrier that made the earlier victory durable. If the resilience bill passes without the ban, a future government could revive access mandates without first overcoming an explicit statutory prohibition.

The dev.to post closes with practical advice: judge governments by the laws they keep rather than the promises they make, and treat any claim of access that does not weaken encryption as a backdoor until someone produces a concrete design showing which keys exist, where they live and who holds them. The resilience bill still has to pass, and the next parliamentary session offers another opportunity to reintroduce the demand.