4 ms·
>RIM makes a big deal about how secure its users' data is, but I don't know how much of that to believe: It sounds like RIM is describing normal public key enc
by Herring 16y ago
>RIM makes a big deal about how secure its users' data is, but I don't know how much of that to believe:
It sounds like RIM is describing normal public key encryption. I'm not sure why Schneier thinks they have the plaintext, though admittedly "customer data" could refer to anything.
- unwind 16y agoSince you're presumably entering the data (i.e., email text) using a BlackBerry device, running an RIM-developed operating system, device drivers and so on, RIM most likely "have" your data. At least that was how I interpreted it, and it makes sense to me.
- thought_alarm 16y agoThat's not how computers work.
- jonknee 16y agoEspecially considering on the other end your email comes out as plain text (it's not a requirement to send to other BB devices). Perhaps their messager service works completely encrypted, but as far as emails go that's surely not the case.
- caffogene 16y agoThat's like saying Mozilla has emails you sent through Gmail, because you know they made Firefox. It doesn't work that way.
- oozcitak 16y agoThis is from the BES Security Technical Overview [1 p.30] [pdf]: Before the BlackBerry device sends a message, it compresses and encrypts the message using the device transport key. When the BlackBerry Enterprise Server receives a message from the BlackBerry device, the BlackBerry Dispatcher decrypts the message using the device transport key, and then decompresses the message. Doesn't that mean that BES has the plaintext? [1] http://docs.blackberry.com/en/admin/deliverables/16650/BlackBerry_Enterprise_Server-Security_Technical_Overview--1153051-0615043613-001-5.0.2-US.pdf http://docs.blackberry.com/en/admin/deliverables/16650/Black...
- wmf 16y agoBES has the plaintext, but where is BES located?