4 ms·
What's to stop apple from registering another device on your account, which will get the shared keys? color me skeptical.
by jakob223 9y ago
What's to stop apple from registering another device on your account, which will get the shared keys?
color me skeptical.
- caiob 9y agoApple can't simply register devices into your account, they would have to have access to your iCloud account, which they can only get using one of those keys.
- jakob223 9y agoI guess if the devices are only willing to share keys with other devices which can individually prove they have the iCloud password. I wonder if it's an online procedure or if they just upload the keys to iCloud, encrypted with the user's iCloud password.
- nicky0 9y agoWhen registering a new device you have to authorise it using one of your existing devices.
- gizmo 9y agoThis can be fixed by asking for confirmation on every device in the same ring when a new device is added. Only after confirmation the keys get shared.
- matthewmacleod 9y agoThat's not really feasible if the loss of one key means all data is kaput
- jchw 9y agoI stopped using iPhone. However, I believe they did at least ostensibly fix that problem by not trusting new devices added until you trust it on at least one other device that already has the keys. I think the last remaining piece of trust is trusting that Apple's servers are correctly advertising your iMessage public keys, at least if I'm understanding how it works correctly. After all, if you lose access to all devices you can still reset from scratch and get back on iMessage and at least receive messages. Your recipients won't know this happened. How would anyone know if Apple is performing a MITM using this mechanism?
- mrpippy 9y agoIf it's like how iCloud Keychain works now, you have to approve the new device on every existing device, and I believe each device pair generates keys known only to them.
- raldi 9y agoDon't you need to access the secure enclave on an existing device to do that now?