The postcard analogy
Regular email is like a postcard: every mail carrier can read it. End-to-end encryption is like a sealed envelope: only the recipient can open it.
How it works
- Alice wants to send Bob a message
- Bob's device creates a key pair: public + private
- The public key goes to Alice
- Alice encrypts with Bob's public key
- Only Bob's private key can decrypt it
- Even the server (WhatsApp, Signal) can't read it
The public key can't decrypt. Only the private key on Bob's device can. This is mathematically proven. Even the most powerful computers in the world can't crack it in any reasonable time.
Why Chat Control undermines E2E
Chat Control bypasses encryption without breaking it. The trick: client-side scanning.
Normally
You type → encrypted → server → recipient decrypts. Server sees only noise.
With Chat Control
You type → AI on your phone analyzes → if "ok" → encrypted. Surveillance BEFORE encryption.
The problem
You won't notice. Encryption still works. But a third party has already read the content.
Which messengers have E2E?
| Messenger | E2E Default | E2E Calls | Open Source |
|---|---|---|---|
| Signal | Always | Yes | Yes |
| Always | Yes | No | |
| Threema | Always | Yes | Yes |
| Telegram | Secret Chats only | Yes | Yes |
Telegram does NOT have E2E by default. Only "Secret Chats" are encrypted. Normal chats and groups are NOT E2E encrypted. Telegram can read the content.