4 ms·
Could be - but time would be something easily guessable if you knew the public key. Still not bad though since the public keys are being stored on the devices.
by convivialdingo 7y ago
Could be - but time would be something easily guessable if you knew the public key.
Still not bad though since the public keys are being stored on the devices.
- StavrosK 7y agoHow would it be guessable if you're hashing it with a random string?
- convivialdingo 7y agoPublic keys are essentially trackable metadata if they're shared. The proposed hash of time + public key would be guessable if you had access to a particular public key. Apple certainly could get the public key. They wouldn't know specifically what data was in the encrypted message, but with enough attributes (IP, time, Apple ID, etc) they could obviously gather a high-confidence amount of tracking data still.
- StavrosK 7y agoI said "time and pre-shared key". The public key doesn't enter into it.
- convivialdingo 7y agoSure - that's a solution - Apple's iCloud Keychain might work there also. I don't use it and have some reservations as Apple’s iCloud services still do not provide end-to-end encryption. I'd be interested to see what Matt Green has seen.