Differences

This shows you the differences between two versions of the page.

--- e2ee [2026/06/11 07:30] – created usera
+++ e2ee [2026/06/19 12:28] (current) – usera
@@ Line 2: / Line 2: @@
 Here are the slides:
+{{ :0:e2ee-presentation.odp |}}
+{{ :0:e2ee-presentation.pdf |}}
+===== What is end to end Encryption =====
+Usually, this is how you interact with someone: each time you make a request to the internet (a Google search, sending a mail, sending a Signal message, going to Facebook, everything), you do not talk directly to the person you want to talk to (in case you want to share something with someone). There is always a middle man, called a //server//:
+{{ :e2e_description.png?600 |}}
+Every information that passes through the server can be seen by the server, which is administrated by some entity, which will at least cooperate with the police or other government agencies if needed.
+This is something that can be prevented by using End to End encrypted services. With such services, you encrypt your message on your own laptop, then send it to the server that will only pass it to someone, who will decrypt it on their own computer: the server only has access to encrypted data.
+{{ :e2e_description_2.png?600 |}}
+===== What common tools are end to end encrypted =====
+Messaging apps such as [[https://signal.org/download/|Signal]], WhatsApp and Facebook Messenger are end to end encrypted. However, Signal is widely considered the safest tool for messaging, as it makes a lot of effort to reduce the metadata it collects compared to the other two. If you do not have a smartphone, or if you wish to use a burner for your signal account, please follow [[signal_install_burner|those instructions]] to install signal without a smartphone. [[https://web.telegram.org/|Telegram]] is NOT end to end encrypted
+[[http://cryptpad.fr/|Cryptpad]] is an end to end encrypted, open source and possible to self host service for doing collaborative work on Office documents, or collaborative cloud.
+[[https://nextcloud.com/|Nextcloud]] is an open source, self hostable software that acts as a cloud, a collaborative tool for office documents and group calls. It is NOT end to end encrypted by default, but an App can be added to activate end to end encryption. Then the service should only use the client, not the browser. Note that this feature is only True for files, not for all the extra collaborative things that Nextcloud offers.
+[[https://github.com/ldidry/lufi|LUFI]] is an open source, self hostable, End To End Encrypted software used to share files, in a similar way than the popular WeTransfer (which is neither open source, nor self hostable, nor end to end encrypted).
+[[https://github.com/magic-wormhole/magic-wormhole|Magic wormhole]] is an open source software used for the same purpose than LUFI, but which the built in possibility of using the TOR network for sharing the file, adding anonymity. It requires that the sender and receiver execute a command at the same time though.
+Mails are NOT end to end encrypted. No, not even if you use [[https://riseup.net/|Riseup]]. You can set up PGP with any standard mail provider to have End to End encryption, but this system is nowadays recognized as very complicated, error prone and not very safe. As an example of big limitations, it does not encrypt the subject line, which is quite an important piece of information. If you are interested, you can read several of the critical [[https://www.latacora.com/blog/2019/07/16/the-pgp-problem/|pieces]] written those past years against PGP by clever people. If you use [[https://mail.proton.me/|ProtonMail]] you have PGP end to End encrypted mails only if you communicate to another Protonmail account. If you use [[https://tuta.com/secure-email|Tuta]] you have end to end encrypted mails (with something more robust than PGP it seems) only if you communicate with another tuta user. This is why it is usually recommended to consider Signal as a safer alternative than mails altogether. This is also because of those problems that modern companies set up a secure messaging tool in their website instead of a plain mail. If you still want to try out PGP (which has other features that are more useful than end to end encrypted mails, such as verifying downloads, and is still interesting for pedagogic reasons) you can check my workshop [[pgp_workshop|here]].
+It goes without saying, but SMS and regular phone calls are not only not end to end encrypted, but also not encrypted at all, in any ways. Please avoid them.
+Regarding chat softwares, [[https://discord.com/|Discord]] is not End to End encrypted either. [[https://mattermost.com/|Mattermost]] is open source, self hosted but also not end to end encrypted. [[https://www.rocket.chat/|RocketChat]] is also open source, self hosted and not end to end encrypted by default, although it is possible for the administrator to configure it to be end to end encrypted. [[https://matrix.org/|Matrix]] is open source, self hosted, federated and end to end encrypted.
+===== How to "manually" use a unknown cloud service in an end to end encrypted way =====
+It is still OK to use unsafe and not end to end encrypted clouds like google drive, onecloud or others if you stick to this rule: **always encrypt your files and folders before putting them on those unsafe clouds**.
+How to do this ? We are going to introduce two very useful encryption tools, which are open source and cross-platform:
+[[https://veracrypt.io/en/Downloads.html|Veracrypt]] and [[https://cryptomator.org/|Cryptomator]]