|
|
|
|
|
|
by mr_mitm
26 days ago
|
|
|
In a recovery scenario, you don't have the password or whatever you used to encrypt the key. And again: the whole point E2EE is that you don't have to trust the provider. Open source in general doesn't help you here because you don't know what software or which version of the code the provider is running. Your only chance is to run open source client software, review it to ensure E2EE has been implement properly, then you don't need to trust the provider. Either the provider knows the secret, then they can help you in a recovery scenario, but then they also can read your data. Or they don't know the secret, in which case they cannot help you in a recovery scenario. |
|
|