3 ms·
You quite explicitly don't need to audit the backend to verify something is end to end encrypted. I can be confident nobody is snooping on my TLS communications
by jakear 7y ago
You quite explicitly don't need to audit the backend to verify something is end to end encrypted. I can be confident nobody is snooping on my TLS communications without needing to audit every router along the way, this is in some ways the entire point.
- swsieber 7y agoThe point of e2e encryption is that the server can't decrypt it.
- jakear 7y agoYes, but I don't need to audit the server to be sure it can't decrypt it. Thats the real point. Otherwise a ROT-13 that I've manually verified isn't decoded by the backend would be considered "e2e encryption".