• borari@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    13
    ·
    1 day ago

    Did you run gpg yourself to generate the key pair, then exchange pub keys with your chat partner? Or did Facebook generate the keys for you from within a closed source application?

    • Puddinghelmet@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      4
      ·
      edit-2
      1 day ago

      if it has a backdoor it’s literally not end-to-end encryption at least, and they say it is so… idk so they are literally breaking the law and we can fine them again?

      • borari@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        11
        ·
        edit-2
        1 day ago

        You’re misunderstanding what end-to-end encryption is. If they have a copy of your private key, it’s still end to end encrypted. The alternative would be akin to a TLS termination proxy, where your device would encrypt a message using Facebooks public key, they decrypt message, store it, and then Facebook uses your chat partners public key to encrypt and send to them. You cannot send an encrypted message straight through to your chat partner.

        What I’m insinuating is that there’s no way to know if Facebook has a copy of your private key. The message is still end-to-end encrypted, it is encrypted by you using your chat partners public key, and passes through all of Facebooks infrastructure encrypted, until your chat partner receives and decrypts it. If Facebook stores the message, it’s stored encrypted. They can just decrypt it when subpoenaed or whenever they want bc they have the required private key.

        • Puddinghelmet@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          edit-2
          1 day ago

          Ooo mb you’re right yeah, also when you use backups I read… ok something to look into for myself to understand better fr, thanks for this comment btw