3 ms·
Apple says that iMessage uses asymmetric encryption, the private key of which is stored only on device. You can choose to believe they're lying, I guess, but w
by valleyer 3y ago
Apple says that iMessage uses asymmetric encryption, the private key of which is stored only on device. You can choose to believe they're lying, I guess, but what they are describing is indeed possible.
https://support.apple.com/guide/security/imessage-security-overview-secd9764312f/web https://support.apple.com/guide/security/imessage-security-o...
- lxgr 3y agoUntil now, Apple hasn't offered any way of actually comparing what keys you are writing to, though. In other words, there was nothing technically stopping Apple (or somebody with the power to compel them) from adding additional recipient keys to your account that your or your contacts would not be aware of. This is about to change with contact key verification and transparency, though.
- wayfinder 3y agoAsymmetric encryption doesn’t change anything. Apple is still the one telling your client whose key to encrypt the data for. A BIG part of successful encryption is key exchange. A successful SSL/TLS man-in-the-middle attack exchanges false asymmetric keys.