On: Facebook turns over chats to police resulting in a...

[traviswt]

It shouldn't be possible for them to turn over the chats. E2E encryption is tables stakes for messaging, but they won't do it because there's profit to be had in understanding users through their private messages.

So yes, Facebook is still in the wrong here.

[gmerc → traviswt]

They do offer an E2E platform Whatsapp which is wildly popular in the rest of the world AND the ability to have e2e encrypted chats on messenger too.

So really what more to expect?

[friend_and_foe → traviswt]

If it were table stakes people would opt for messeaging applications that have it, seeing that there's a plethora of them out there.

I don't like Facebook, and I don't use it or any of Meta's products, but if people want encryption they have options.

[fsociety → traviswt]

They have been rolling out E2E chats in messenger for a while now. So yes, they will and are doing it.

[smoldesu → traviswt]

How would E2E encryption stop law enforcement from subpoenaing data at-rest?

[LargeTomato → smoldesu]

I think E2E is encrypted at rest. Technically, all data over TLS is encrypted while in transit.

[smoldesu → LargeTomato]

E2EE strictly means that it is encrypted between endpoints. It makes no promises about how the keys are handled, how the data is protected at rest, or how secure either endpoint is. TLS is a version of this, but also demonstrates how useless such a version of encryption is if either endpoint is malicious.

This is one of the reasons homomorphic encryption is interesting. It should enable this kinda of "total user control" over your data, but it's highly unlikely consumer systems will implement it.