TLDR Tech / DevOps
How Meta Is Strengthening End-to-End Encrypted Backups
Meta introduced two major updates to its end-to-end encrypted backup system for WhatsApp and Messenger, including over-the-air fleet key distribution that allows Messenger to update HSM security keys without app updates (using validation bundles signed by both Cloudflare and Meta), and a commitment to publicly publish evidence of secure HSM fleet deployments on their blog. The HSM-based Backup Key Vault stores users' recovery codes in tamper-resistant hardware that Meta claims neither the company nor any third party can access, with the system deployed across multiple datacenters using majority-consensus replication.
Read the full story