This is from the BES Security Technical Overview [1 p.30] [pdf]: Before the BlackBerry device sends a message, it compresses and encrypts the message

This is from the BES Security Technical Overview [1 p.30] [pdf]: Before the BlackBerry device sends a message, it compresses and encrypts the message using the device transport key. When the BlackBerry Enterprise Server receives a message from the BlackBerry device, the BlackBerry Dispatcher decrypts the message using the device transport key, and then decompresses the message. Doesn't that mean that BES has the plaintext? [1] http://docs.blackberry.com/en/admin/deliverables/16650/BlackBerry_Enterprise_Server-Security_Technical_Overview--1153051-0615043613-001-5.0.2-US.pdf http://docs.blackberry.com/en/admin/deliverables/16650/Black...