The article argues that web-based applications claiming end-to-end encryption fail due to inherent structural flaws. It asserts that such systems cannot provide reliable security because the same entity that operates the service also distributes the cryptographic code, undermining security claims.
Web-based applications often tout 'end-to-end' encryption, but many lack the architecture to provide genuine security. Tendencies to claim full data protection do not hold up when scrutinized against the structure of web technologies.
The article emphasizes that the distribution model of web apps inherently compromises security because the server operator can modify the client-side code.
The author introduces a law stating that a cryptosystem is incoherent if the distributor of the implementation is the same entity that it seeks to defend against. This implies that web applications claiming to secure user data are fundamentally flawed because malice from the server operator makes it easy to alter client code.
Security against external threats is managed through TLS, therefore relying on 'end-to-end' encryption in contexts where the server operator is untrusted offers no substantial benefit.
The argument extends beyond web apps, suggesting that widely-used applications like WhatsApp and Signal fall into the same trap. Both prevent the use of third-party clients, meaning their encryption promises might also be misleading.
This perspective challenges the security trustworthiness of many popular communication services, raising questions about real privacy levels.
The limitations of web-based cryptography have significant implications for internet security and user trust. Users of these services should critically evaluate encryption claims, as they may not provide the protections advertised.
Overall, this analysis serves as a cautionary note for both developers and users regarding the integrity of cryptographic systems on the web.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The article argues that web-based applications claiming end-to-end encryption fail due to inherent structural flaws. It asserts that such systems cannot provide reliable security because the same entity that operates the service also distributes the cryptographic code, undermining security claims.