4 ms·
With true end-to-end encryption there is no need for a middleman. Each user 1. encrypts her data at the source i.e. on her own computer and 2. sends the encr
by 520794 9y ago
With true end-to-end encryption there is no need for a middleman.
Each user
1. encrypts her data at the source i.e. on her own computer and
2. sends the encrypted blob over the untrusted network, or so-called "dumb pipes".
Hardware company that makes the users computer tries to dictate whether and how #1 can be done.
Not necessary.
The software for doing #1 does need to be open source.
On mobile, does such software even exist?
And even if it does, is a mobile phone really the users computer? It is an effectively locked enclosure with several computers controlled by third parties.
The way to do secure mobile messaging would be to encrypt the message on a computer the user controls, then move the message to the "mobile phone" and then send to the untrusted network.
Alternatively, do not use a mobile phone for messaging if worried about others have access to the messages. Wait for a pocket sized portable computer that can be tinkered with. No baseband, etc.
- theWatcher37 9y agoEverything you said is also true of modern desktop computers, see intel's ME and AMDs equivalent.
- 520794 9y agoNot all computers are Intel or AMD and not all Intel or AMD computers have the "features" to which you refer. Even more, nothing requires these computers to be connected to the untrusted network. ME requires an internet connection. The message encrypted on the user-controlled computer can be moved to the "mobile phone" via a wired local network, serial link or removable media. Is such transfer to and from the device made difficult by the way these mobile phones are constructed and configured? Yes, and probably this is intentional. Companies want user data and the way they get it is by encouraging users to store data in the "cloud". Most importantly, these Intel and AMD based computers are not the only computers capable of encrypting messages. If ME scares you then do not use computers that have it. If you have computers with ME then disconnect them from the internet and get a computer without ME for your internet needs. This message was typed on a computer that does not have ME, would not be considered "desktop" and would probably not qualify as "modern". It makes no difference. No problems encypting messages on it.