Questions tagged [end-to-end-encryption]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
78 views

Encryption of calls and files in XMPP

I use Conversations, and my interlocutor is Monal (or another application for iOS (you can tell which is better)). I plan to use OMEMO for encryption. Are files and photos encrypted or not? Are calls ...
hhf's user avatar
  • 11
0 votes
0 answers
79 views

Where to store user private keys in a webapp? [duplicate]

I'm building a webapp where I want to encrypt user data. I've done A LOT of research about this. The main issue is that I want only users to be able to access their data. After reading countless ...
nick's user avatar
  • 101
3 votes
1 answer
234 views

Benefits of the Double Ratchet protocol over the constant Ephemeral DH key exchange

I've been reading lately about the Double Ratchet protocol, how it works conceptually. I understand generally the idea behind the protocol, that it provides Forward Secrecy and Post-Compromise ...
cliffroot's user avatar
  • 133
0 votes
0 answers
120 views

How to implement secure E2EE for a managing App

TL;DR Is it possible to create an end-to-end encrypted web application where newly created users are able to access data encrypted before their creation? My plan is to develop a (let's call it a ...
Kndo2378's user avatar
0 votes
0 answers
77 views

Encrypted messaging app using QR codes for key exchange

I remember seeing an encrypted messaging app a while ago that offered using QR codes to exchange encryption keys between the users. Of course, this only worked when the people met physically, but ...
zajic's user avatar
  • 11
0 votes
0 answers
80 views

Backup to a remote Encrypted APFS drive mounted through Samba. Is this a sound plan?

Say I have a remote machine (something like a VPS) that I have no physical access or physical authority over other than a user on it (with root access). However, I'd like to do Time Machine backups on ...
The Quantum Physicist's user avatar
1 vote
0 answers
20 views

How do end-to-end encryption (E2EE) IM apps implementing push notifications? [duplicate]

Say WhatsApp and Signal on Android devices, how do they keep the E2EE not be broken? Some answers claimed that WhatsApp uses VoIP background mode on iOS to make the push notification invoke the app to ...
Xiangyi Meng's user avatar
2 votes
1 answer
155 views

How to avoid breaking end-to-end encryption while employing cloud-based DDoS protection?

I have a few websites and apps that I need to protect from DDoS attacks. These websites and apps are delivered by various servers that sit in several small data centers around the world. I'm thinking ...
hilltothesouth's user avatar
-1 votes
1 answer
266 views

Are the video calls made in a 3G/4G network encrypted end-to-end?

When I make a video call through a cellular GSM/4G network, is there any end-to-end encryption? If yes, what kind of algorithms and CPUs are used?
just_learning's user avatar
-1 votes
2 answers
343 views

Is end-to-end encryption really secure?

If a software uses end-to-end encryption and the encryption key of a client never leaves the device, isn't it still relatively "simple" to get the encryption keys of clients? A hacker just ...
Mointy's user avatar
  • 99
1 vote
2 answers
6k views

Signal — Can message previews of the messages you send be disabled in the chats’ list of your addressee?

Premise Signal is armed with measures to instil a sense of privacy in users by preventing undisclosed screenshotting and screencasting message threads, and by enabling the sender to set their text, ...
Raiden Snaker's user avatar
0 votes
1 answer
161 views

Confidential Computing - SQL Server Always Encrypted w/ Secure Enclave - Customer Managed Keys or alternative

I am looking into ways to build a data warehouse that would house confidential data for 1+ clients. The requirement is that our organization can never obtain access to the decrypted data. There would ...
jackie's user avatar
  • 101
1 vote
2 answers
237 views

Is TLS encryption between sender and receiver without middlemans end to end encryption and TLS security

As in title, I want to know that is TLS encryption end-to-end encryption when between sender and receiver there's no any middleman? E.g.: We are sure that TLS in case 2 doesn't provide end to end ...
Szyszka947's user avatar
0 votes
2 answers
117 views

Are all encrypted tunnels also considered virtual private networks (VPN)?

A few days ago, a colleague and myself were having a discussion specifically on site-to-site VPNs. My understanding, and how I was taught, are that all encrypted tunnels are virtual private networks ...
Peter Derouen's user avatar
5 votes
1 answer
707 views

Free messaging (but not images, video, etc) on United Airlines free wifi: is it secure?

I recently flew with United Airlines and I used their free messaging wi-fi plan. I could text my friends on Whatsapp, but I could not send (nor receive) multimedia content like images, videos or audio ...
kYuZz's user avatar
  • 153
2 votes
4 answers
843 views

End-to-end encryption with multiple recipients?

As far as I understand, end-to-end encryption is used to encrypt the content on the client (sender), send it to the server and decrypt it on the client (recipient). The clients store their private ...
JavaForAndroid's user avatar
0 votes
2 answers
866 views

Is an IRC conversation using TLS between two people, one of whom owns the server, end to end encrypted?

If I run an IRC server, and my friend and I connect over TLS and chat, is the conversation essentially end-to-end encrypted because all computers that see the plaintext messages are owned by one of ...
Someone's user avatar
  • 159
1 vote
1 answer
104 views

How to deal with targeted attacks from publisher when verifying the integrity of native applications and validating their source code?

I am trying to reason about how native apps can avoid the problems web apps have in dealing with the "Browser Cryptography Chicken and Egg" problem, which has been discussed numerous times ...
tyhdev's user avatar
  • 13
4 votes
0 answers
467 views

How does end-to-end encryption work with whatsapp web as of 2022?

The accepted answer to this question is now outdated, since Whatsapp web does not require an online smartphone to function anymore. How is the key exchange performed securely?
Federico Poloni's user avatar
1 vote
1 answer
555 views

End To End Encryption Model

I have an architecture which requires a certain subset of data to be more heavily secured and encrypted. The main parameters which I believe meet the scope of the project are as follows: Data should ...
Eric Uldall's user avatar
3 votes
1 answer
499 views

Is the new Whatsapp Web update compatible with E2E encryption?

You may see this question as a logical successor of this post. With the new Whatsapp Web update it is now usable without keeping the smartphone online. I can't imagine how this is compatible with End-...
etw0's user avatar
  • 55
-1 votes
1 answer
99 views

how to fully secure web/mobile/desktop application connected the same backend server [closed]

I have a React/Express application, I want to fully secure it. I'm looking for best practices for these features: data encryption/decryption end-to-end communication access control role management ...
Ayoub Benayache's user avatar
1 vote
1 answer
194 views

Is authentication through mail clients safe when encryption is off?

When adding an account on a mail client, the SSL/TLS is usually turned off and the encryption method is 'none' (see Outlook example below). Is the password safely sent through the internet when ...
chckx592's user avatar
26 votes
7 answers
6k views

Is encryption in transit distinct from end-to-end encryption?

I asked a question about HTTPS encryption as it relates to developing a web app here. On the face of it that question has now been closed twice for not being focused enough, but if the meta discussion ...
Hashim Aziz's user avatar
2 votes
2 answers
515 views

How can I verify the hash of the plain text without being able to decrypt the cipher text?

I am building an E2EE chat app where there is one asymmetric key pair per group. Each user also has one asymmetric key pair. All messages in a group chat are encrypted with the group public key and ...
david_adler's user avatar
1 vote
1 answer
2k views

Key management for End-to-end encryption for Chat application

I want to implement end-to-end encryption on my chat application (available on android, iOS and web). For that I've following mechanism in mind. Generate Key pairs (Private key and Public key) on ...
Mrugesh Tank's user avatar
0 votes
2 answers
732 views

Is end to end encryption over HTTP safe?

If you wrap all your data in an end-to-end encrypted payload is it safe to transmit over HTTP or at worse case self signed HTTPS instead of traditional CA signed SSL?
Dan's user avatar
  • 101
1 vote
2 answers
247 views

Can TLS enable end-to-end security between 2 users(not server) in IPv6?

I'm studying iot Secure knowledge. I find that people say that TLS/DTLS can provid e2e security but in HTTP diagram it will stop at Server. A->Server->B and data at Server will be decrypted. In ...
CandLX's user avatar
  • 11
0 votes
1 answer
177 views

How to prevent server know what data is being transferred through it between two clients

Imagine a web application in which two computers can communicate with each other by transferring files, through the server linked with some unique password. Every file sent between the clients are ...
ben berizovsky's user avatar
0 votes
1 answer
223 views

JWT to prevent others from using video in their iframes

I just recently discovered JWT to secure my live stream and have done successful token on server and player but I think it still can be stolen. How I can use it to only have the domains I choose to be ...
Brax's user avatar
  • 1
0 votes
1 answer
186 views

E2E-Encrypted storage: What to do when the lifetime of a key is over?

When using AES-GCM-256 with random nonces, a limit of 2^32 encryptions is specified in order to have a low nonce collision probability. A new key has to be generated to take its place afterwards, I am ...
Gamer2015's user avatar
  • 717
0 votes
0 answers
19 views

Is there hardware (like u2f-keys) for passwordless client-side encryption & decryption [duplicate]

I know that u2f keys are designed as authentication factors, but I think it would not be far fetched to also add a protocol that the user can use to encrypt or decrypt data on the client-side. This ...
Gamer2015's user avatar
  • 717
0 votes
1 answer
216 views

Does End-To-End-Encryption in Web Applications require trust?

In a talk from Moxie Marlinspike he mentioned that Signal does not intend to release a web application because they are impossible to audit. The javascript code is retrieved on each page load, so it ...
Gamer2015's user avatar
  • 717
0 votes
3 answers
611 views

Multiple devices encrypting data using the same key?

I want to implement a service that can't read the data you store there. The Idea is that I, like in a password manager, use the password to derive a vault key, which is different from the ...
Gamer2015's user avatar
  • 717
0 votes
2 answers
441 views

Need some clarification regards end-to-end encryption process

Let's say I want to make a messaging(just an example, take it as any data) web(react + node) application(more like an email rather than chat) with end-to-end encryption. So at some point, I will want ...
sembaas's user avatar
1 vote
3 answers
515 views

Is it safe to send an encrypted blob as a URL parameter?

The context is a password reset functionality. The user has requested a password reset, either via the web, or via a call to the help desk. The proposed solution is, behind the scenes: If Self-...
John Arrowwood's user avatar
2 votes
1 answer
121 views

Can we mask encrypted traffic to look like real traffic [duplicate]

Assumptions: Some places ban or at least think about banning encryption. Encrypted traffic can be easily spotted because it looks like nonsense (or something else?). Question: Suppose I put my ...
DonQuiKong's user avatar
0 votes
3 answers
930 views

What can my Telco / ISP learn from my Signal (secure messaging app) communications?

To preface this question, I use Signal messaging app for voice, video and text. I understand that the content of all these messages are encrypted and no-one but the sender and recipient can see/hear ...
Shae's user avatar
  • 53
13 votes
4 answers
10k views

How To Recover End-To-End Encrypted Data After Losing Private Key?

I'm creating a mobile app which has chat feature in it. Since I wanted to make it secure, I'll do some encryption to messages and the data. I'm thinking of using End-To-End encryption for it but I've ...
Eagleclaw's user avatar
  • 257
0 votes
2 answers
2k views

How to know whether mysql connection is using SSL or TLS connection?

I want to verify whether mysql remote connection is using tls/ssl connection for security purposes. I ran status command to check initially: mysql> status -------------- mysql Ver 8.0.19 for osx10....
ANWESH MOHAPATRA's user avatar
2 votes
1 answer
191 views

How to prevent mobile data from being viewed when leaving VPN server?

Please correct me if i'm wrong. As far as i know, when we use vpn service, our datas are only encrypted from us to vpn server. After leaving the server to intended recipient, our data is decrypted and ...
My Email's user avatar
4 votes
1 answer
4k views

What is the correct way to create a backup copy of a PGP key pair?

I am using GnuPG 2.2.20 to create my key pair. I have successfully created a key pair, now I want to create a backup copy in case of HDD failure. Following the instruction here, I have tried gpg --...
robertspierre's user avatar
0 votes
0 answers
187 views

Is my own PKI based end-to-end encryption secure?

I implemented a simple chat that (tries to) encrypt messages end-to-end. I approached this problem by making both parties generate an ECDH keypair (P-384) and consequently share their public keys. ...
BinarSkugga's user avatar
0 votes
1 answer
273 views

How to encrypt data so only clients can read, but not the server

I am building a system where the clients should be able to communicate with each other. However I want all the data to be hidden from the server where the information is stored in a database. How can ...
Willow's user avatar
  • 1
2 votes
1 answer
168 views

What's the best encryption strategy to go with when everybody needs to be able to write data but only a select people can view it?

I really just need an encrypted support ticket system essentially. The user who writes the ticket doesn't need to be able to view it afterward but a handful of staff need to be able to decrypt the ...
Benjamin's user avatar
  • 121
3 votes
2 answers
1k views

If Whatsapp media messages are e2e encrypted, what is the point of storing popular messages on the server?

There is something I don't understand about whatsapp's privacy policy. Your Messages. We do not retain your messages in the ordinary course of providing our Services to you. Once your messages (...
yukashima huksay's user avatar
1 vote
1 answer
696 views

Is it worth using an http proxy?

Sorry for my lack of terminology in the field, that's something I've little (or none any) practical knowledge about. I've browsed similar questions on the security risks of using (web) proxies, but ...
Fat32's user avatar
  • 113
0 votes
1 answer
238 views

RestApi Libsodium SealedBox end-to-end request encryption scheme

I am making an API that uses the following steps for encryption. All of this is implemented using libsodium. First of all the client has to make an initial request to the server for getting his public ...
Leonel Franchelli's user avatar
0 votes
1 answer
241 views

Storing Bob encrypted data, and send them to Alice (who must be able to decrypt the content)

I need to develop a website where a user (Bob) send text, image, or video content to my website. After some time, I need to send this data to another user of his choice (Alice). I want to encrypt user ...
Slot's user avatar
  • 101
0 votes
3 answers
453 views

Security impacts of using public wifi

I generally use a free college wifi and sometimes chats on telegram and also send pics can hackers access those pics and chats and can he access my gallery and see pics? And if he hacks and install ...
10E_13_ Bipin's user avatar