Yet, most people fall for the E2E-encrypted iMessage story, while the Messages are only encrypted at rest when you have iCloud Backup enabled (I’d guess most people) and ADP disabled (I’d guess most people). The fact that I have ADP enabled doesn’t matter because most people I communicate with don’t have ADP enabled (or know what it is).
replyThis is all only mentioned in the footnote of an iCloud security document [1].
Apple cares about your privacy, so much that they made a backdoor through bad defaults, well in reach of the CLOUD Act.
[1] Footnote 9 in https://support.apple.com/en-us/102651
> Yet, most people fall for the E2E-encrypted iMessage story,
replyMost people don't even understand that when their favorite app that says E2E that that app still has access to the clear text before it's encrypted...
Yeah, you have to trust the app. The point is that they don’t have to do anything nefarious in their app, because there already is a gaping hole in the system.
reply