I guess it's fair to assume that when we say "the conversation's participants" we explicitly mean everyone except the broker. I think it's important in this day and age to accept that the broker is now a conversation participant as well. Maybe we should look more into P2P messaging software.
> the broker is now a conversation participant as well.
I don't agree. This is the antithesis of the intent of the term "end to end encryption." Otherwise you could just use TLS to secure each of the {client->broker} connections and then you could call it "end to end".
I don't see why my comment was down voted. I made a valid argument that the expectation of the broker not being privy to the conversation is a bit unreasonable and we should further explore P2P.