Skip to content
atlas

Don't confuse these

End-to-end encryption vs TLS

Why they differ

TLS protects data only on each hop and the server reads it in the middle; end-to-end encryption keeps it closed all the way from sender to receiver.

End-to-end encryption

Cryptography

Scrambling a message on the sender's device so that only the receiver's device can read it, not even the service carrying it.

Formal

A design in which data is encrypted on the sending device with keys held only by the people talking, so every server in between, including the provider's own, passes along data it has no key to read.

In plain English

Like posting a locked box that only your friend has the key to - the postal service carries it all the way but can never open it.

In practice

A ministry lets staff use a chat app with end-to-end encryption on their work phones. IT can manage the phones, but a request to the app's provider for the chats would return nothing readable.

Why it matters

Without it, every message can be read at the provider, so one break-in or one curious member of staff exposes everyone; the trade-off is that lost keys mean lost messages.

TLS

Networking

The protocol that wraps data sent over TCP/IP in an encrypted channel after checking the other side's certificate.

Formal

A protocol running on top of TCP/IP that first checks the other side's identity through its digital certificate, agrees on shared secret keys, and then uses encryption to keep data private and unaltered in transit. It replaced the older SSL; version 1.3 is current.

In plain English

Like sending your letters in a locked, sealed case, after first checking the person receiving it is really who they claim to be.

In practice

A municipality's IT operations manager is warned that the TLS certificate on the citizen self-service site expires in ten days; she renews it, since otherwise citizens' browsers would show a security warning and many would give up.

Why it matters

Without it, anyone on the same wifi or along the route could read or change passwords and personal data as they pass.

Shared connections

Atlas is in beta.