4 ms·

That's not end-to-end, that's just regular old symmetric encryption.

• Borealid 3y ago
  "End to end encryption" can mean either a scheme in which each device has its own key and arranges to trust others, or a scheme in which a key is shared across devices (symmetric). Just because there is only one key doesn't disqualify the solution from e2ee status. If the middleman does not have the key, it's still end to end secure.
• jeroenhd 3y ago
  Assymetric keys aren't a requirement for E2EE. In fact, in most cases, assymetric encryption is only used to exchange a symmetric key to use for data decryption anyway. Assymetric cryptography is way too inefficient to encrypt and decrypt more than short secrets. The whole reason you'd enable this feature is for when you lose your phone and need to provision a replacement. There's not really any way to do the whole key exchange dance if you don't have access to the original source. A password derived key is essential in this case.
• 007asdflkjsfd 3y ago
  [flagged]