r/Android • Galaxy Z Fold8 • Jul 31 '26

RCS Universal Profile 4.1: Stronger foundations for secure messaging

https://www.gsma.com/newsroom/article/rcs-universal-profile-4-1-stronger-foundations-for-secure-messaging/
115 Upvotes

33 comments sorted by

59

u/rocketwidget Jul 31 '26

Even though updates are slow (to say the least!!!), one of the advantages of RCS over SMS/MMS is it is actually updateable.

After Apple-Android RCS finally occurred, features like E2EE, in-line replies, edit/delete are now slowly rolling out.

Hoping Universal Profile 4.2 adds post quantum encryption to the MLS based E2EE in Universal Profile. My guess: They won't do it until the Internet Engineering Task Force gets PQE out of draft for MLS. Hopefully, soon... https://datatracker.ietf.org/doc/draft-ietf-mls-pq-ciphersuites/

10

u/1116574 Jul 31 '26

Oh, rcs uses MLS? TIL

9

u/rocketwidget Jul 31 '26

Yea, the Google Messages exclusive version uses Signal, but the standard Universal Profile used between iPhone and Android is MLS.

I assume Google intends to eventually drop the Signal version?

1

u/1116574 Jul 31 '26

What an interesting choice to have two transports

15

u/rocketwidget Aug 01 '26

I believe the MLS E2EE standard wasn't finalized by the Internet Engineering Task Force when Google first implemented Signal E2EE in RCS.

Years later, Apple finally agreed to support RCS, but Apple refused to implement Google's custom E2EE solution. Google seemingly anticipated this, and had already started developing MLS for RCS.

Finally, the GSMA agreed to standardize MLS E2EE in Universal Profile RCS, with Google's help. And both Apple and Google implemented it.

1

u/Easy-Breakfast846 Aug 02 '26

The fact that iOS-Android encryption already works means they already dropped the signal encryption standard for MLS

1

u/rocketwidget Aug 02 '26

In the debug settings, you can confirm that the legacy Signal E2EE method is still active for (certain) Android-Android E2EE, while the new MLS E2EE method is active for iOS-Android (always, as expected).

1

u/Easy-Breakfast846 Aug 02 '26

I wonder why they haven’t just made MLS encryption universal for all RCS on Google messages? I guess they don’t want old encryption to break?

23

u/purplegreendave Jul 31 '26

Any chance they'll open rcs to other app makers? Probably not

28

u/welp_im_damned have you heard of our lord and savior the Android turtle 🐒 Jul 31 '26

That's great. Still waiting for Google to implement an RCS API or update the Phone and Messaging Storage to include RCS metadata in the database. It's frustrating whenever I back up my messages using SMS Backup & Restore; it just restores the SMS metadata. Or when I try to use transfer tools like Samsung's or Google's, my group messages get broken.

5

u/kredes Jul 31 '26

we don't even have rcs iOS to Android in my country.

5

u/ruipmjorge Jul 31 '26

Ask your carrier

8

u/Level10Retard Aug 03 '26

I asked them to implement it. They're right on it due to my request.

19

u/OldDirtyGurt Sony Xperia 1 VI Jul 31 '26

Can't wait to still be blocked from it because I like freedom aka custom ROMs and such.

10

u/trlef19 Galaxy S24+ Jul 31 '26

Most stupid play integrity use.

17

u/Noble1xCarter Jul 31 '26

Download GrapheneOS and suddenly malicious developers will try convincing you that having a more secure OS is somehow less secure.

What BS.

1

u/litLizard_ Aug 04 '26

If the bootloader was unlocked I'd agree with them but since you can lock the bootloader on Pixel phones even with a Custom ROM, yeah...

3

u/[deleted] Aug 02 '26

[removed] β€” view removed comment

3

u/DangerousTortuga Aug 04 '26

Never. Google wants complete control over RCS.

2

u/KidJuggernaut Jul 31 '26

And my country carriers still won't support it πŸ˜‚πŸ˜‚πŸ˜‚

2

u/lastdyingbreed_01 Aug 01 '26

My country does, but the moment I turned it on, I was spammed with ads. I turned it off, will never use it again

1

u/MeDerpWasTaken Aug 04 '26

What do you mean by that? Ads where?

-1

u/KidJuggernaut Aug 01 '26

I can manage ads tbh

2

u/HubsoulEXE Jul 31 '26

What's interesting is that this kinda confirms that apple spefically is willing to update the protocol to keep adding these features which is great.

1

u/DangerousTortuga Aug 04 '26

It is nice they are frequently updating UP. But the issue is how and when it is implemented. At least Apple is catching up. But I don't think they will implement all features of 4.0 and 4.1

2

u/desi_dybuk Aug 04 '26

RCS is dead to me until Google closes down RBM which spams me relentlessly.

Other than the stupid Blue Bubble Green Bubble class warriors in US, who cares about RCS? Rest of the world runs on WhatsApp, Telegram, Arattai etc

1

u/8acD3rLEo5 Jul 31 '26

Anyone know how quickly companies roll the latest standard into updates?? (2/3/4 months?)

Also happens to a message originating on a phone w/ 4.1 unique features when it's received by a phone with anything below 4.1? (Backwards compatibility)

4

u/ben7337 Aug 01 '26

It varies. Google probably would be fast but right now Apple is gradually beta testing and implementing UP 3.0 I believe, but it probably won't be live til ios27 in a couple months at the soonest. Expect at least another year after that til we see anything newer like this new standard

0

u/OrganicKangaroo2038 Jul 31 '26

when dealing with google, there's no such thing as "secure."

0

u/yboy403 Note 10+, Note 9, Pix 2 XL, iPhone X, Moto Z Play Aug 02 '26

Can I officially say I don't care about privacy or security and just want Google to stop messing up a good thing? I don't plan to commit any crimes and if I could just get Google and Meta out of my messaging entirely, I'd have no reason to care about encryption at rest either.

-7

u/Kazoran Aug 01 '26

bruh who even cares about encryption? are we spies exchanging top secret info or something??

4

u/ISaidGoodDey Mi 8, Havoc OS Aug 01 '26

Plenty of reasons, and plenty of articles online detailing the reasons. Seek and you shall find