3 ms·

I assumed "encrypted at rest" to mean encrypted with the user's passcode, meaning it could only be decrypted from a properly authorized user session, not some i

• izuchukwu 9y ago
  From my understanding, that is how Apple encrypts on device. They don't use this with iCloud data at rest and instead maintain encryption keys themselves [1] so in the event of, for example, a user losing their credentials, they would still be able to assist. [1]: https://support.apple.com/en-us/HT202303 https://support.apple.com/en-us/HT202303
• andai 9y ago
  > Privacy advocates and privacy caring IT specialists have repeatedly asked Apple to offer such an option, but so far Apple has decided that regular people would turn such an option on, forget their password, then ask Apple for help and would be unhappy with their brand experience if Apple could not help them out. From Darthy's comment 30 minutes ago https://news.ycombinator.com/item?id=14513803 https://news.ycombinator.com/item?id=14513803