3 points
IMO it should be some sort of private key to negotiate keys, but each message (or at least set of messages) encrypted with its own key that you can safely share with the server owners to report spam/bad actors.
2 points
Yeah, I’ve got a proposal that’s being worked on: https://github.com/soatok/mastodon-e2ee-specification