3 ms·
This is a really good point; I don't use Messages on my Mac so I forget that's an option. Maybe the concept is the same, but on a Mac the private key is stored
by snowwrestler 7y ago
This is a really good point; I don't use Messages on my Mac so I forget that's an option.
Maybe the concept is the same, but on a Mac the private key is stored in the Keychain instead of a physical enclave?
- Spooky23 7y agoI think it is in keychain, but my understanding is that Secure Enclave keys cannot be exported.
- tialaramex 7y agoIt's not uncommon for software to claim to offer this feature. Windows does it for example, and it was a bug in such a feature for WebCrypto in Firefox that made the news recently here. Invariably such features are weak and a sufficiently capable attacker can override them. In Windows for example you could reach into the opaque data structure and toggle the Boolean that forbids exporting keys...