3 ms·

iOS? Plus, I know folks who use mail.app. I also bet they could figure out how to instrument Safari with browser-side encryption for their cloud users. A few m

iOS? Plus, I know folks who use mail.app. I also bet they could figure out how to instrument Safari with browser-side encryption for their cloud users. A few more privacy scandals break, and if Apple had an end-to-end encryption story that sounds roughly like: “If you’re using Apple products and services, you probably don’t need to think too much about the techy parts.” I could easily see Apple cementing their position for anyone even remotely concerned about privacy. Apple the computer company. Apple the media company. Apple the smartphone conpany. Apple the consumer privacy and protection company? I could see it.

virusduck 9y ago
Where do you keep the keys? * On the device? Oops--device broke, guess my emails are gone forever * In the "cloud"? -- Oops, can't guarantee encryption Who generated the keys and how do you build trust? For both of these, you can trust Apple do do the right thing, but that's putting all your eggs into that basket, similar to iMessage.
- Spivak 9y ago
  On device with the key exportable and optionally escrowed to iCloud. Key management isn't exactly an unsolved problem.
  - y4mi 9y ago
    > Key management isn't exactly an unsolved problem you're right its not an unsolved problem, its an unsolvable problem. There is little point in encrypting mails between apple users, if the keys are kept on the apple servers. What would it achieve after all? Apple, and by extension every nation of importance would still have access. the only reward you'd get from that is getting locked into the apple ecosphere even stronger, because now you won't be able to read your mail archive anymore unless you use an apple device. And you obviously can kiss search goodbye. There is no way to search encrypted data after all, unless you decrypt it.

3 ms·

iOS? Plus, I know folks who use mail.app. I also bet they could figure out how to instrument Safari with browser-side encryption for their cloud users. A few m

by peatmoss 9y ago

virusduck 9y ago
Where do you keep the keys? * On the device? Oops--device broke, guess my emails are gone forever * In the "cloud"? -- Oops, can't guarantee encryption Who generated the keys and how do you build trust? For both of these, you can trust Apple do do the right thing, but that's putting all your eggs into that basket, similar to iMessage.
- Spivak 9y ago
  On device with the key exportable and optionally escrowed to iCloud. Key management isn't exactly an unsolved problem.
  - y4mi 9y ago
    > Key management isn't exactly an unsolved problem you're right its not an unsolved problem, its an unsolvable problem. There is little point in encrypting mails between apple users, if the keys are kept on the apple servers. What would it achieve after all? Apple, and by extension every nation of importance would still have access. the only reward you'd get from that is getting locked into the apple ecosphere even stronger, because now you won't be able to read your mail archive anymore unless you use an apple device. And you obviously can kiss search goodbye. There is no way to search encrypted data after all, unless you decrypt it.