• scytale@piefed.zip
    link
    fedilink
    English
    arrow-up
    2
    ·
    10 hours ago

    E2E encryption doesn’t matter when you can’t trust the actual host in the first place.

    Not referring to Tuta specifically, but isnt that the point of E2E encryption? That you have assurance even if you don’t trust the host? Unless they don’t demonstrate and publish what encryption mechanism they use of course.

    • Seralth@piefed.seralth.com
      link
      fedilink
      English
      arrow-up
      2
      ·
      8 hours ago

      Your not entirely wrong. It’s mostly the fact, that even with e2e your still relying on their word that they aren’t doing something shady or do something stupid. There’s no external force keeping them honest.

      One is none two is one. Someone’s word is good but someone’s word, and another keeping them honest is better.

      If your going to trust someone else it’s better some form of equality in the deal. As a consumer to a corp that’s basically impossible with out a legal enforcement layer.