• ShortN0te@lemmy.ml
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 day ago

    End-to-end encryption means the service provider can’t see your data even if they wanted to

    Not necessarily. All it means is that intermediaries can’t see the data in transit. You need to trust that the data is handled properly at either end, and most service providers also make the apps that you run at either end.

    This is incorrect. End-to-End is defined as from “User to User” and not “User to Service provider”. That would be just transport encryption.

    https://en.m.wikipedia.org/wiki/End-to-end_encryption

    • sugar_in_your_tea@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      1 day ago

      Right, and that’s what I mean too.

      For example, let’s assume Google Drive is E2EE, the client apps on both sides have access to unencrypted data, and they can absolutely index it or whatever to sell to advertisers. The statement in the article was overly broad, because the service provider can see your data, assuming they also control the client apps.