What is End-to-End Encryption?

⚠️ If you're sharing private or sensitive information, end-to-end encryption is an important term you need to understand.

⚠️ End-to-end encryption
End-to-end encryption ensures that information being communicated is visible only to the individuals at either end and not to anyone in the middle, including the service provider. Given that service providers can be compelled to hand over information to law enforcement, end-to-end encryption ensures they have nothing to hand over. When exchanging sensitive information, make sure to use tools that explicitly use end-to-end encryption.

Chapters
0:00 End-to-End Encryption
0:12 Facebook turned over personal chat transcripts in response to a court order
1:05 Understanding End-to-End
2:45 End-to-middle encryption
6:30 It’s more than the service
7:20 The solution
8:37 Not a solution - VPNs

More Ask Leo!

#askleo #encrytpion #security

[askleonotenboom]

Not all encryption is equal, and why you should care.

[pbrigham]

Just be aware that Telegram is only end to end encryption if you activated after install, by default stays decrypted.

[RobertSander]

Very helpful, especially concerning about VPN's.

[NoEggu]

@2:53 "...end to middle"
When it comes to End to End encryption, you have to identify each end.

@4:51 "Honestly, facebook doesn't care what you're talking about. They really don't."
Leo, you are guessing. You cannot know what the key people in facebook care to see.

For example, if Madonna was having a private messenger session with Trump Jr., would your position still be that they do not care?

A question to folks reading this comment:
If you were an executive at facebook, and could watch the private messages of Mayors, Governors, Movie Stars, Military Generals, Heads Of State (around the world), Fauchi, Paul McCartney, LeBron James, etc, would you resist looking at their private conversations?

Our host is probably correct, for 99.99%+ of the public, because there are too many unknown people with boring conversations. But not everyone is an unknown, and not everyone has boring conversations. If you send messages with certain key words (such as assassinating a head of state, or improper relations with children, or threats to national security, or threats to Zuckerberg, etc, I suspect that facebook's profiling software would pick it up).

The above are examples off of the top of my head. There are probably many more, such as the head of Exxon giving a private stock tip to a colleague. Who would not look at that?

facebook makes its ocean of $$ by spying on you. To assume that they are not spying on your messages is unrealistic.
And if you are of no interest to facebook today, and you decide to run for Mayor next year (or have higher aspirations), what are the odds that an executive at facebook will not check your messaging history?

To reiterate my first paragraph...
All End To End encryption is End To End, including facebook's messenger. You are on one "End", and facebook is on the other "End".
Then facebook creates a new "End", with your intended recipient on facebook's other "End". That, too, is End To End. But facebook has your dialog 100% in the clear, by being in the middle.

On the other hand:
Signal, which our host mentioned, is End To End, with one "End" being you, and the other "End" being your intended recipient.
Signal is open source, so we need not have to take their word for it. Developers, globally, can see exactly what Signal is doing (you can, too, if you know how to read the source code).

So with any End To End encryption service, always identify exactly where each "End" is located.

[Devilplayer]

I have a question.
So a few months ago i was on a Side that used a Program called, ,App Jumper", that Programm opened two apps on my phone that were Connected to my Google Account, some time later i started getting Spam in my Spamfolder. Should i be worried that they stole some of my data?

[Devilplayer]

Hey Leo, First I want to say that I love your videos, they really help me when im worried about my data Security.
And Second: I get Spam Mails on my gmail adress that i only use for my Google Account so i dont registrate myself with it somewhere, do you have any idea how they got on my gmail adress?