In their explanation it was specifically stated that it should be either impossible or too difficult. Keeping keys and content separately, that’s what it’s about
They’re lying? Encryption at rest does not protect at all against the server snooping around. When you send or receive a message, the server has to see it in plaintext unless you have E2EE. So there is a way for them to access the plaintext of any message you receive, and it happens automatically billions of times per day. It’s pretty easy.
That’s wrong. There is no plaintext transfer. While a lot of stuff can potentially happen on server every second as you said, it doesn’t happen according to them. I don’t trust that fully either but that’s their argument. You can look up encryption schemes in their faq.
They’re lying? Encryption at rest does not protect at all against the server snooping around. When you send or receive a message, the server has to see it in plaintext unless you have E2EE. So there is a way for them to access the plaintext of any message you receive, and it happens automatically billions of times per day. It’s pretty easy.
That’s wrong. There is no plaintext transfer. While a lot of stuff can potentially happen on server every second as you said, it doesn’t happen according to them. I don’t trust that fully either but that’s their argument. You can look up encryption schemes in their faq.