Read the thing I linked

I am not envisioning an IM system.

I’m envisioning a correctly implemented encryption layer for how DMs currently work (with the caveat that I believe cryptography should never EVER be done in the browser (unless an extension or whatever)).

How much do you know about cryptography?

I’ve written tons about why this approach was taken, but it might be inaccessible to someone with limited knowledge of modern cryptography protocol design. (Authenticated encryption, forward secrecy, context commitment, etc.)

This was my earliest blog post on the topic, if you want a place to start.

Your instance admin subtitutes the public key in your profile with one they control.

How do you stop this?