3 ms·
[where this model breaks down] -- Alice and Bob go to your website and have a conversation. Eve hacks into the website and modifies the E2EE code. She can switc
by ahazred8ta 3y ago
[where this model breaks down] -- Alice and Bob go to your website and have a conversation. Eve hacks into the website and modifies the E2EE code. She can switch between serving the normal webapp and the malicious non-E2EE webapp. There's no good way to detect it. There are people out there who really like end to end security, but don't like browser-based e2ee because it doesn't have end to end security.
Note: https://www.cyph.com/ https://www.cyph.com/ is a bbE2EE chat system.
- tptacek 3y agoMore generally: since you have to trust the server, you might as well just rely on TLS, because the "E2E" extra stuff isn't actually buying you anything. This is the Telegram model.