Regardless of how their encryption is done, if you reregister your phone number you get an sms and you’re in and the complete message history is decrypted. So clearly they have all the keys, otherwise they couldn’t send it to you. Practically it’s not end to end encrypted.
Note that this is the same with many services that claim encryption, for instance Apple.
Does apple have the keys or does iMessage just resend as a regular text if you deregister? End to end means only the two parties involved have the keys period.
Well I can't remember specifics but I seem to recall somebody pointing to the flaws of their open bounty that it had very specific rules like not MITM'ing someone or something along those lines. Good end to end encryption shouldn't be able to be MITM'd is the thing.
Note that this is the same with many services that claim encryption, for instance Apple.