they can't surrender keys they don't have (e2e). the only issue is that they may be forced to do a key change. one way around this would be to show a prominent notice if your peer changed keys, which would make it immediately obvious what was going on.

> Actually if Apple, Goog, FB etc are forced to surrender the key--at the penalty of being excluded from 1.x billion people in India--math works only one way...

They did that with Blackberry few years ago

The idea that showing a warning makes it immediately obvious what is going on is ridiculous.

It would take a large-scale public education campaign to teach people what it means when they see a warning message that reads "Peer key changed. Are you sure you want to proceed?"

If you need to be convinced, go ask your mom or dad whether it's immediately obvious what is going on when they see an insecure connection warning in their web browser. In my experience everyone just clicks through to "proceed anyway" without comprehending it at all.

That’s why most browsers now make this difficult to do.

If India wants and if they can do it (maybe trade agreements prohibit them...not sure,) there's no way around. You want to do business in India? Yes? OK, then should have the key and must give it to India's police. Otherwise a ban on your business in India, $billion fines and arrests warrants for entire line of execs.

Apple has great hopes for India https://www.msn.com/en-us/finance/companies/its-been-a-rout-...