Hacker News Reader

Yes we do as there are 3rd party clients (eg yowsup) that also need to implement it.

Problem is that you don't know of the app is leaking your keys somewhere else.

This is my point exactly. It doesn't matter as long as the app is closed source. You could do the worlds most secure E2EE implementation, but then send a copy of all keys to Facebook servers.

Reply on news.ycombinator.com