[criddell]

> This is not possible with e2e

Why not? You can encrypt a message with more than one key, no? It’s still e2e, just that there are multiple ends.

Apple’s Messages is e2e (until SMS is used) and they have group chats.

[skrowl]

Until SMS is used OR until either side has iCloud backups turned on (which is the default setting)

[_flux]

Just shipping keys to someone to hold on doesn't make the encryption not-end-to-end, though it does reduce the point quite a bit.