Hacker News new | ask | show | jobs
by realitythreek 1070 days ago
Just to clarify one possible misconception, the two ends would be the mother and daughter’s phones in this case. Meta shouldn’t have the key to decrypt accessible to them.

You’re absolutely correct that it can be decrypted on either end but Meta should resist putting a backdoor in their app that allows this. If no other reason than it compels them to be in the middle of this criminal case.

Also Facebook Messenger already enables this (https://www.facebook.com/help/messenger-app/1084673321594605) but it’s not the default. It should be.

This is just basic privacy and for sure won’t protect you from a focused government attack but it’s a start.

1 comments

This is the part where things get ambiguous and it's hard to say how things go. On paper, you are correct and I 100% agree with everything in this comment. In practice, I have no reason to believe anything Facebook says correlates with the implementation of their encryption.

I want to believe it's a safe system, but as-always it comes down to trusting trust. Without accountability, it's hard to take WhatsApp or iMessage or any E2EE service at face value. E2EE leaves so many exploits on the table that I basically treat it as marketing fluff.