
5/1/2026 · Evan Smoot, Guy Lewin, Antonio Martin, Kevin Koh
What this post added
Introduced over-the-air fleet key distribution for Messenger's end-to-end encrypted backups, enabling new HSM fleet deployments without app updates. This mechanism uses signed validation bundles from Cloudflare and Meta to cryptographically prove the authenticity of fleet public keys. Also committed to publishing evidence of secure HSM fleet deployments to enhance transparency.