Hacker News Reader

The sad part is, most e2e aren't true e2e. Even if they are, they often backup everything in a central location like Whatsapp/ which put everything in your Google account without any additional crypto layers, making it all accessible with a subpeona or prism to any law enforcement agency.

Edit: Removed Signal as an example.

View on HN

> they often backup everything in a central location like Whatsapp/Telegram/Signal which put everything in your Google account without any additional crypto layers

I don't know about the others but I don't think Signal does this. Signal offers the user the ability to backup their messages, and lets them password protect them, but the way you've written this implies Signal is uploading messages to Google of its own volition, unencrypted, which afaik is not the case.

Signal only backs up messages on Android - and requires a thirty digit key to be provided to save/restore. Is this not the encryption key then?

Reply on news.ycombinator.com