4 ms·

Yes they're end-to-end encrypted (according to the release notes here https://support.apple.com/en-us/HT208067#114 https://support.apple.com/en-us/HT208067#114)

Yes they're end-to-end encrypted (according to the release notes here https://support.apple.com/en-us/HT208067#114 https://support.apple.com/en-us/HT208067#114): - Store your messages, photos, and other attachments in iCloud and free up space on your devices - All your messages appear when you sign into a new device with the same iMessage account - When you delete messages and conversations they are instantly removed from all your devices - Your conversations continue to be end-to-end encrypted This Messages in iCloud support article has more details on how to set it up: https://support.apple.com/en-us/HT208532 https://support.apple.com/en-us/HT208532

larrysalibra 8y ago
Thanks!
chillacy 8y ago
Anyone know how it works? Currently messages are encrypted with the public key of every target device and dispatched directly to the device who decrypts it with keys in the hardware, but that means a new device which comes on won't be able to receive older messages. Now that a new device can receive older messages, and assuming apple doesn't have the keys to your messages, who does the sending? Does one of your existing devices have to relay all the messages by downloading, decrypting, and re-encrypting for the target?
- chillaxtian 8y ago
  Likely with 'CloudKit End to End Encryption', see page 57 here: https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf > CloudKit end-to-end encryption > Apple Pay Cash, User keywords, Siri Intelligence, and Hey Siri use CloudKit end-to-end encryption with a CloudKit service key protected by iCloud Keychain syncing. For these CloudKit containers, the key hierarchy is rooted in iCloud Keychain and therefore shares the security characteristics of iCloud Keychain—the keys are available only on the user’s trusted devices, and not to Apple or any third party. If access to iCloud Keychain data is lost (see “Escrow security” section later in paper), the data in CloudKit is reset, and if data is available from the trusted local device it is re-uploaded to CloudKit.

larrysalibra 8y ago

Thanks!

chillacy 8y ago

Anyone know how it works? Currently messages are encrypted with the public key of every target device and dispatched directly to the device who decrypts it with keys in the hardware, but that means a new device which comes on won't be able to receive older messages. Now that a new device can receive older messages, and assuming apple doesn't have the keys to your messages, who does the sending? Does one of your existing devices have to relay all the messages by downloading, decrypting, and re-encrypting for the target?

chillaxtian 8y ago
Likely with 'CloudKit End to End Encryption', see page 57 here: https://www.apple.com/business/docs/iOS_Security_Guide.pdf https://www.apple.com/business/docs/iOS_Security_Guide.pdf > CloudKit end-to-end encryption > Apple Pay Cash, User keywords, Siri Intelligence, and Hey Siri use CloudKit end-to-end encryption with a CloudKit service key protected by iCloud Keychain syncing. For these CloudKit containers, the key hierarchy is rooted in iCloud Keychain and therefore shares the security characteristics of iCloud Keychain—the keys are available only on the user’s trusted devices, and not to Apple or any third party. If access to iCloud Keychain data is lost (see “Escrow security” section later in paper), the data in CloudKit is reset, and if data is available from the trusted local device it is re-uploaded to CloudKit.