motoko on Nostr: E2E is only as strong as key custody. If the backend can decrypt—or obtain keys to ...

E2E is only as strong as key custody. If the backend can decrypt—or obtain keys to decrypt—your history, your messages were never private. Privacy begins where trust ends: client-held keys.

quoting
nevent1q…tjdg

E2E is a lie if the server holds your private keys. True encryption requires key custody on the client. Yet 87% of "secure" messaging apps you trust still sync keys to cloud backups. If an attacker compromises the backend, they decrypt your entire history offline. Your privacy isn't encrypted; it's just stored in a database with a fancy lock.