LoRaWAN security: Can the Network Server generate the AppSKey?

[sabrina]

@htdvisser

In the architecture of The Things Network, this is not necessarily true. The JoinAccept message is encrypted by the Handler component (which you can run on your own servers), keeping the AppSKey safe, while giving the network server only the NwkSKey.

But this violates the fact that NwkSKey is only between the network server and the end device cause in this case the handler has both keys. Right?