SpecterEnd-to-end encryption means a message is encrypted on the sender's device and can only be decrypted on the recipient's. Every system in between, including the company operating the service, relays data it cannot read.
How it works, briefly
Each device generates a key pair and publishes only the public half. Messages are encrypted to the recipient's public key, and only the matching private key on their device can open them.
Modern implementations, most of which use the Signal Protocol or a derivative of it, add a ratchet that changes the encryption key with every message. This produces forward secrecy, meaning that compromising a key today does not expose the messages already sent. Signal, WhatsApp, and several other services use this design, though what surrounds it differs a great deal between them.
What end-to-end encryption does not protect
This is where most people's mental model is wrong, and the gaps matter more than the cryptography.
- Metadata. Who you contacted, when, how often, and from where. Encryption of message contents does not conceal the existence of the conversation, and metadata alone reconstructs relationships, routines, and locations with high accuracy.
- Endpoints. A message decrypted on a device is readable by anyone with that device, and by malware running on it. Encryption in transit protects the transit.
- Backups. The most common real world leak. A chat backup uploaded to a cloud service without its own encryption is a plaintext copy of everything, sitting with a provider who can be compelled to produce it.
- The other person. Screenshots, forwarded messages, and a recipient's own backup settings are outside your control entirely.
- Group membership. Whoever can add members to a group controls who receives future messages.
The scanning debate, and why it is the live threat
The pressure on end-to-end encryption has shifted away from demanding backdoors in the cryptography. The current proposals target the endpoint, scanning content on the device before it is encrypted, which technically leaves the encryption intact while removing what it was for.
Apple announced device side scanning of photos in 2021 and shelved the plan in 2022 after sustained objection from security researchers. The European Union's child sexual abuse regulation proposal, widely referred to as chat control, has been through several drafts containing detection order provisions. The United Kingdom's Online Safety Act contains powers relating to scanning that the government has acknowledged are not currently technically feasible to apply to encrypted services.
The pattern is consistent across all three. Once a scanning mechanism exists on the device, the policy question of what it scans for is separate from the technical question of whether it can, and only the second one is hard.
Practical steps that materially help
- Check your backup settings first. This is the highest impact change for most people, and an unencrypted cloud backup undoes the rest.
- Verify safety numbers or security codes with important contacts through a separate channel, which is what detects an interception attempt.
- Turn on disappearing messages for sensitive conversations, since data that no longer exists cannot be seized from either device.
- Secure the device itself with full disk encryption and a strong passcode, because the endpoint is the weak point.
- Treat group chats as semi public, since membership can change and any member can copy the contents.
Specter Comms
Specter Comms is end-to-end encrypted, so the platform relays ciphertext it has no ability to read. A company that cannot read message contents has nothing to mine, nothing to sell, and nothing to produce when compelled. A privacy policy describes what a company intends to do with data it can access, and it changes when management changes. Architecture that removes the access is a different kind of claim.