Comment by saurik

FWIW, I was expecting something like "the mechanism is fundamentally flawed because the e2e encryption actually is designed in a way where the server can derive or find the key"; but, thankfully, this is "merely" the "obvious" vulnerability in key exchange: "how do I know I wasn't given a forged key by the server?", to which the protocol generally won't have any solution (barring some kind of pgp-style web of trust, which protocols should probably adopt) and the only reasonable thing to do is to add a UI that shows the user the key and helps them verify it (preferably with a mechanism to make chats look insecure until they are verified, like Threema also gets right)... which thankfully this developer did--though I have no clue how well the UI works in context as I haven't used it and am only glancing at the screenshots... probably nowhere near as good as Threema--instead of trying to paper over the problem and pretending it doesn't really exist by simply throwing certificate pinning at the proximal MITM problem because their server can (of course) be trusted like Apple does with iMessage without addressing the ultimate flaw [<- all of which I describe in a single run-on sentence, as it is maximally fun :D, before y'all get upset at me and leave pointless replies].