2

Is it possible to have true end-to-end encryption even if the user is not involved in generating, selecting, transporting, or storing of the keys?

  • 2
    I guess you could create and encrypt the keys on the client without ever seeing them yourself. But the user should always be able to view the keys and verify them. Else the server could just send different keys to other clients or send fake keys to the client pretty easily – Crecket May 15 '16 at 19:28
  • If it's correct, on e-mail traffic, exists some providers that offers end to end encryption and it seems that between the same provider accounts, it is not needed to care about any password. Do you meant this ? e.g. former Dark Mail – Tech-IO May 15 '16 at 20:22
  • @GiaRui Yes, it can be. Is it then end-to-end? – Alex Cole May 15 '16 at 20:36
  • 1
    @AlexCole of course it is possible, if the client app performs key functions on behalf of the user. If that is in scope of what you are asking. – schroeder May 15 '16 at 20:39
  • it could also be possible if the key is tied to the user's password, or if the central service hands out keys (it is true end-to-end, but not trustworthy) – schroeder May 15 '16 at 20:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.