Building end-to-end security for Messenger – Engineering at Meta

Re:Building end-to-end security for Messenger – Engineering ... by Thorrez on Thursday December 07, 2023 @08:47AM (#38556191)

FWIU, this[1] was decrypting imessages successfully. But was also storing all your imessages in a serverside database accessible to the server (instead of being e2e encrypted like imessage is supposed to be) and leaking the authentication token to access the imessages over unencrypted HTTP.