Hacker News new | ask | show | jobs
by ent 2053 days ago
Isn't the whole point of e2e that you don't need to worry about what runs on the server, unless you're worried about metadata leakage.
1 comments

Correct, but if there is something between you and other user and can intercept key exchange then it can decrypt and encrypt anything on the fly. I think you would have to exchange keys offline to have true e2e experience.