2 ms·
You could actually have an e2ee conference. Even with FaceTime you trust Apple to give you the users' private keys, and not MITM-ed ones. With a conference, th
by iknowstuff 7y ago
You could actually have an e2ee conference. Even with FaceTime you trust Apple to give you the users' private keys, and not MITM-ed ones.
With a conference, the server could generate a private/public key pair for each dialed-in phone number. That way you could retain hope that they were giving you non-MITM-ed keys for participants when no phones are involved.
Generally though, Apple's "end-to-end encryption" is a false promise and SHOULD NOT be trusted. If they wanted to provide privacy and weren't bound by the government (like they were when they tried to encrypt backups), they'd follow whatsapp and allow offline comparison of keys via QR codes and notify of changes. But they didn't.
Apple won the marketing battle on privacy, but please don't trust them. They have access to all backups, all your pictures, and they can MITM your iMessage/FaceTime when the government requests it (or whenever they want to, really).