3 ms·
It is encrypted (except email) but Apple has the keys for the stuff I listed: https://support.apple.com/en-gb/HT202303 https://support.apple.com/en-gb/HT202303
by fauigerzigerk 8y ago
It is encrypted (except email) but Apple has the keys for the stuff I listed: https://support.apple.com/en-gb/HT202303 https://support.apple.com/en-gb/HT202303
Also, in China Apple handed over iCloud operations to a government owned company, including the keys.
- orhmeh09 8y agoI don’t see Apple having access to keys there. Could you point it out? CTRL+F for “key” came up with 7 results but nothing to suggest Apple holds them and can decrypt. Apologies.
- fauigerzigerk 8y agoThere's a section about half way down that lists all end-to-end encrypted data (keychain, health, payment data, ...). By implication, all other data is not end-to-end encrypted. That includes iCloud drive, photos, calendar, contacts and mail.
- eunoia 8y agoAre we reading the same support article? https://support.apple.com/en-gb/HT202303 https://support.apple.com/en-gb/HT202303 Specifically listed as encrypted in transit and on server: - iCloud Drive - Photos - Calendar - Contacts Only mail is not according to this support article. Edit: I see the omission now. These things are not listed under the end-to-end section.
- fauigerzigerk 8y agoYes, exactly, so that data is encrypted on the server using a key that is in Apple's possession.
- MertsA 8y agoAlso one big deal is how Apple handles key distribution. They absolutely could MitM that connection to get access to the user's keychain and the UI doesn't really give the user any feasible way to detect that Apple has added their own key instead of just the key for your other device that Apple doesn't control. It's "end to end encrypted" but if you just handwave away key distribution and leave that up to Apple, what's the point other than a marketing gimmick?