3 ms·
What is the definition of end to end encryption? Is my HTTPS connection end to end encrypted if there’s a CDN terminating and re-establishing TLS at the edge?
by cj 3y ago
What is the definition of end to end encryption?
Is my HTTPS connection end to end encrypted if there’s a CDN terminating and re-establishing TLS at the edge?
What if I terminate TLS at the load balancer and clear text to servers in a private subnet?
The above wouldn’t be end to end IMO.
True end to end IMO means the communication provider is unable to see the contents of the message. Basically public/private key encryption with no middleman.
This obviously breaks email spam filtering systems (unless it’s all moved client side, or unless you give Google your key, in which case Google can decrypt your emails, so what’s the point?). Unless we water down the definition of “end to end” to mean between companies rather than user to user.
True E2E encryption is difficult when you want to do any processing in the cloud (e.g. Google photos making images searchable - I suppose this is why the Photos app on Mac drives CPU to 100% for a couple days when syncing photos to a new computer, seems like Apple is doing a lot of on-device processing which seems like the opposite direction many other companies are going)
- braiamp 3y ago> What is the definition of end to end encryption? That the encryption is kept from the emitter to the receptor in a way that no intermediary should be able read the plain text. In other words, that once it's encrypted by one end, is only decrypted on the other end. Also, mail providers wouldn't be required, because they are the end of the communication, not the user.