[aiharkness]

After some more reading and re-reading, here is what I understand....

Where there is TLS, it is between the device and the server.

TLS does not use the BlackBerry BBM global key that is hard-coded on BlackBerry handsets. The global key is for the triple DES "scrambling". So the TLS is on top of the triple DES. But so far as it makes sense to me, the communication for standard BBM travels BlackBerry servers either unencrypted or else "scrambled" using global key, depending on the devices involved. From device across mobile network or Internet the communication is encrypted using TLS if the devices are involved are BB10 or iOS, Android, or Windows Phone.

BBM Protected and BBM Protected Plus, subscription services, provide end-to-end encryption that is unreadable even by BlackBerry. Not standard BBM.
Posted via BlackBerryForums.com Mobile