After the Bundeswehr wiretapping scandal: How secure is communication?

The Bundeswehr wiretapping scandal raises many questions. What options do politicians have to communicate secretly and securely? A look at the current situation makes it clear: there is hardly any such thing as absolute security.

It exists: the secure communications infrastructure for authorities. The “federal networks” include almost 10,000 kilometers of fiber optic lines that are laid across Germany. This network is primarily intended for data exchange, but video conferences are also planned.

However, the system is getting old and is technically considered completely outdated. This is one of the reasons why ministries now mostly use other methods. “You no longer communicate over a line, but over the Internet. And that is basically accessible to everyone and is constantly vulnerable to attack,” says Stefan Brink, former data protection officer for Baden-Württemberg, now head of the Research Institute for the Digitalization of the World of Work (WIDA), in Interview with the MR.

Authorities do not use the standard WebEx

In the specific wiretapping case, the Bundeswehr officers used the WebEx software. The Bundeswehr often uses this system, explains Stefan Brink. He doesn’t see this as a problem if certain conditions are met: Participants in a conference call should check that no uninvited guest is dialed in. And the Bundeswehr must use every opportunity to encrypt the conversation as best as possible. Because she has this opportunity.

The government version of WebEx differs from the classic versions; for example, it runs on its own servers. If a certain encryption of the software is activated, information that is classified as “classified information – for official use only” may also be exchanged via it. This is the lowest level of secrecy.

The Federal Ministry of Defense says it uses other communication systems in addition to WebEx, but does not say specifically what these are. Depending on the level of secrecy, different applications are permitted. A check is currently underway to determine whether the requirements have been adhered to in the current wiretapping case. There are many indications that the contents of the box went beyond the lowest level of secrecy.

Ministry software for Video conferencing

Other ministries have developed their own software for secure conference calls, for example the Foreign Office. Like WebEx in the Bundeswehr, this tool is intended for the exchange of information with a classification level of “For official use only”. The federal government’s digital strategy speaks of a “lighthouse project”.

Left-wing politician Anke Domscheit-Berg, member of the digital committee in the Bundestag, criticized in an interview with ARD capital studio However, this software is hardly used by other ministries. She would like more exchange. And makes it clear: When it comes to IT security, a chain of criteria must work so that it is secure. “We need secure hardware, we need secure software, we need secure behaviors and a secure environment.” If there is a single gap in this chain, there is a high probability that someone will exploit it, says Domscheit-Berg.

Tap-proof rooms

How federal authorities should deal with confidential information is set out in the so-called classified information instructions. It says that conversations about classified content must take place in tap-proof rooms. Such rooms can be found in ministries and embassies, for example. Anyone who goes in must hand over their cell phone first.

The Federal Office for Information Security is responsible for controlling tap-proof rooms at home; abroad it is the Federal Intelligence Service.

A “wakeup call”?

Domscheit-Berg also points out possible dangers in the analog world: It could still happen that a bug is stuck under a lampshade in a room. Even these supposedly outdated methods continued to be common practice for spies. The left-wing politician hopes that the current wiretapping case will shake up political decision-makers. She speaks of a “wakeup call” that could ideally ensure higher standards in online communication.

Federal Defense Minister Boris Pistorius also announced this precise check of the communication systems – which is best suited for which information exchange. He puts it this way: Germany should not be less than “state of the art” on this topic.