2 ms·
No. The problem with first-party end-to-end encryption is that the entity whose customer you are not just providing the pipe for unknown encrypted traffic, but
by chrismorgan 5y ago
No. The problem with first-party end-to-end encryption is that the entity whose customer you are not just providing the pipe for unknown encrypted traffic, but are also providing the encryption software, and can therefore subvert the encryption software (in order to report the key, or other similar actions) if they decide to act maliciously, or are compelled to by any third party (most likely government). If the software is third-party, then the service provider cannot breach the encryption in any way, or provide any assistance in doing so: the third-party software provider will be the party to attack/require to insert a back door, which in this age will generally be a fair bit harder, though it’s far from inviolable.