3 ms·
E2EE push notifications are an option. I don't know how many apps use it, but it's a feature in Pushover.net
by keep_reading 3y ago
E2EE push notifications are an option. I don't know how many apps use it, but it's a feature in Pushover.net
- halJordan 3y agoThe solution isn't just encrypt the payload. Frankly cryptographic guarantees are the problem. It would require something like Signal's Sealed Sender feature, but more. The govt is getting data like "Signal sent user1 a notification." You just can't hide that metadata when you have to cryptographically attest every message you push to apns. If the message has the username or group name that's well and good but is ancillary.