EFF: Ring's TAKE encryption still leaves key access with Amazon

Amazon's Ring recently introduced Throw Away the Key Encryption (TAKE), a key-management scheme in which the user's device holds the key while Ring's cloud temporarily receives it to power features such as smart alerts, video search and video descriptions, then deletes it after 24 hours. The EFF argues this is only a modest improvement over the existing default, because user actions send keys back to Ring's servers, and video descriptions and content indices remain available to the company. The EFF says TAKE is not end-to-end encryption and that Ring could still be compelled to retain keys or unencrypted video under legal process. Ring says it cannot provide keys or decrypted content and that it objects to overbroad requests.