5 ms·
The admin is on the "end" portion of the E2E encryption.
by SanchoPanda 7y ago
The admin is on the "end" portion of the E2E encryption.
- thaumasiotes 7y agoWhat? If there's a company IRC server, and I'm using to encrypt messages locally, send them through the server, and then my friend decrypts them locally, where does the admin get access?
- shadowgovt 7y agoProbably in your boss's office, around the time you're pulled into a meeting with the admin, your boss, and HR, and your boss says "So that message you sent over the company IRC on such-and-such day: what was in it?" ... with all necessary and legal steps taken regarding your continued employment at that organization should you refuse to voluntarily divulge the contents of the message or a way to decrypt it. https://xkcd.com/538/ https://xkcd.com/538/
- thaumasiotes 7y agoThis might happen, but it would seem to disprove the idea that 'The admin is on the "end" portion of the E2E encryption', not support it.
- yjftsjthsd-h 7y agoIt really depends on the details, but one obvious answer is if the admin in question has root access to both of your workstations, which would be completely unsurprising in an enterprise environment.
- SanchoPanda 7y agoFor corporate communication where there is e2e encryption, the e2e protects the communication from viewing by the telecoms or similair, but the business is final party and the admin is the agent of the business and can use the final message as the business sees fit. This of course depends on the structure of the communication, but for many industries, it is required by law to be able to produce communication upon request, and not doing so would be a crime.
- ska 7y agoIn some industries it looks more like this. You aren't allowed the IRC access, and where E2E is required for business function it is routinely MITM and logged. This is a legal requirement, as I understand it (think financial fraud).