On: Disclosing E2EE vulnerability in multiple Matrix c...

[ajconway]

The possibility to perform manual or semi-automated (QR code) key verification is still useful.

1. Those who care about encryption are able to verify their keys.

2. The service can't implement mass-surveillance in secret if there are at least two random users who verify their keys.