↓ Skip to main content

“TEEs can provide more security and privacy than simply running in the clear, but they are fundamentally different from actual encryption.”

Erica Portnoy and Thorin Klosowskieff.org ↗

Apple, Google, and Meta all want your encrypted messages on their servers so their AI can read them. Their answer is a trusted execution environment, which means trusting their hardware and their attestation. Encryption rests on math. A TEE rests on a vendor never shipping a side-channel bug, and that record is bad. Calling it private compute does not make it end-to-end.