3 ms·
There are stronger and weaker forms of it, though. Apple holds the keys to the identity (public key) exchange in iMessage. You're still trusting Apple not to mi
by hot_gril 3y ago
There are stronger and weaker forms of it, though. Apple holds the keys to the identity (public key) exchange in iMessage. You're still trusting Apple not to mitm your conversations, but at least they wouldn't be able to do this retroactively. Other E2EE messaging apps at least have a way to verify each others' pubkeys, but it's not required and very few people do it.
- kstrauser 3y agoApple previously announced their "iMessage Contact Key Verification" (https://www.apple.com/newsroom/2022/12/apple-advances-user-security-with-powerful-new-data-protections/ https://www.apple.com/newsroom/2022/12/apple-advances-user-s...). Rumors are that it's coming in iOS 16.6 which may drop any time now.
- hot_gril 3y agoThat's cool. The article mentions a more common attack I forgot about, someone managing to add a new device to someone's account and get messages on there.