4 ms·
Loopholes already make E2EE impossible. The "end" of encryption is not the entry point of your device, it's you: the user (more specifically, as close as possib
by rhn_mk1 5y ago
Loopholes already make E2EE impossible. The "end" of encryption is not the entry point of your device, it's you: the user (more specifically, as close as possible the place where the data is displayed/entered). If there is some additional stage before/after encryption, then it's not end-to-end.
- zepto 5y agoThere is always some additional stage after the encryption. It’s silly not to call it E2E, since e2e just means that no eavesdropper in the middle can intercept it. If you don’t trust the person who wrote the software you are using, that is a different issue. Just as serious, but it has nothing to do with either it is E2E or not.
- rhn_mk1 5y agoIf you allow untrusted or undersired stages between the "end" and the user, how do you define "end-to-end" without allowing unencrypted intercontinental links?
- zepto 5y agoThat’s self evident. The encryption is between the ends. Allowing unencrypted intercontinental links is a total non-sequitur. You know where the ends are. As I said, you always have something between you and the ‘end’, and you always have to trust someone. Whether something is E2E or not is completely independent from whether you trust your software.