please stop playing fucking games with the meaning of end-to-end encryption, thanks

[zzt@mas.to]

please stop playing fucking games with the meaning of end-to-end encryption, thanks

cc nextcloud (whose end to end encryption is effectively an expensive inconvenient no-op, see https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_DanieleCoppola.pdf which the project never fixed or even acknowledged), seafile (whose “end-to-end” encryption sends your password and key to the server), fucking proton (whose end-to-end encrypted LLM features aren’t end-to-end encrypted at all), et al

e: see replies for an important note on the nextcloud paper!

[zzt@mas.to]

no I’m not tagging any of the project accounts I listed, they don’t give a shit

[zzt@mas.to]

“check out our encrypted self-hosted cloud!”

I look at the encryption

it’s TLS that everyone turns off in deployments cause their reverse proxy takes care of it

[bascule@mas.to]

@zzt you see, it’s end-to-end encryption, but there are multiple ends in the middle /s