Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It is not end-to-end if Google has your key.


Well they did go to the trouble of using the date April 1st in the gif!


It don't.

The "Assured Controls" add on put keys on smartcard / hsm not owned by google.


I never liked the term "end-to-end encryption". I guess we can now say it's fully meaningless.

The one thing I've learnt in security after many years is there are no shortcuts. If you don't understand the basics, you can't have security. Things like "end-to-end encryption" are just trying to avoid teaching people the basics by using nice words.

People understand if someone has a copy of their front door key then it's no longer secure and they need to change the locks. So it should be simple to understand encryption too. But most interfaces try to hide away the existence of keys, which is the most basic principle of all. If you don't know where your key is, how can you be secure?




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: