5 ms·

I'm quite frustrated they are calling this end to end. I can't find it now but a tweet earlier indicated that they have the keys and can help law enforcement wi

by botto 6y ago

I'm quite frustrated they are calling this end to end. I can't find it now but a tweet earlier indicated that they have the keys and can help law enforcement with investigations which means it's can't be end to end.

yepthatsreality 6y ago
It’s the new corporate offering of e2emitm
- anticensor 6y ago
  or rather, e2e2e
  - dane-pgp 6y ago
    End to Eavesdropper to End?
    - anticensor 6y ago
      End to End to End :) AB/BC link encryption is the correct way to refer to such a scheme.
      - dane-pgp 6y ago
        If we're being serious, then then another term used is "hop-to-hop encryption", as in [0]: "Unlike PGP and S/MIME, STARTTLS provides hop-to-hop encryption (TLS for email), not end-to-end." [0] https://www.eff.org/deeplinks/2018/06/technical-deep-dive-starttls-everywhere https://www.eff.org/deeplinks/2018/06/technical-deep-dive-st...
  - g-b-r 6y ago
    Now I'm seriously scared, I found that hex sequence in the ESI of my last browser crash
- botto 6y ago
  You should copyright and license it to Zoom
just-ok 6y ago
Any centralized E2EE service has the (public) keys; that's the only way to distribute them to users. You have to trust (or verify, in the case of Signal) them to deliver authentic keys rather than MitM'ing you.
- g-b-r 6y ago
  It wouldn't be a problem if anybody at all had the _public_ keys, I think he meant the private ones.