I think you've imagined this faulty understanding. There are many mechanisms by which Apple could actually decrypt the data despite pinky promises not to. You listed one. There are others.

▲

johnsmith1840 5 hours ago | parent [-]

You're suggesting they purposely put a backdoor into all their custom methods? Why?

From a liability standpoint that implies a security breach could result in massive loss of customer data and if it did occur would destroy their privacy image to their customers.

I agree with the point that what you actually trust is the company to not insert maliscous code or keys into your protected path but modern systems actually contain ways to truly lock out the company itself from seeing your data.

Security wise it's amazing. If a company's admin cannot take your data it's excedingly hard for a hacker to do so.

▲

IshKebab 2 hours ago | parent [-]

> You're suggesting they purposely put a backdoor into all their custom methods? Why?

I'm not sure what you mean by "custom methods", but I'm not saying they have bypassed the e2e encryption - I'm just saying that they technically could.

And as for why they would do that, they might get compelled by a government to do it secretly. As far as I know that hasn't happened yet but I see no reason it couldn't and it would take a whistleblower to find out.

> Security wise it's amazing. If a company's admin cannot take your data it's excedingly hard for a hacker to do so.

I agree, it is the best option available. But Apple/Meta are technically lying when they say it's impossible for them to read your messages.

	▲	kyralis 22 minutes ago \| parent [-]
		They are not lying when they say that they cannot read your messages at rest or in transit without actively changing the code so that you start trusting a new key. The keys sync between devices in ways that Apple cannot read. This is not bulletproof, because they can potentially change the code to do this - this is what the FBI vs Apple thing was a few years ago was all about.