5 ms·
You left off the point that that only true if you had iCloud backup of iMessages enabled. If you didn't have iCloud backup enabled then they've always been E2EE
by mlindner 3y ago
You left off the point that that only true if you had iCloud backup of iMessages enabled. If you didn't have iCloud backup enabled then they've always been E2EE.
- modeless 3y agoNo, I mentioned that. > If you didn't have iCloud backup enabled then they've always been E2EE. Correction: if you and the person you're messaging both didn't have iCloud backup enabled. And also it's worth noting that Apple forbids you from using any cloud backup system other than theirs.
- vezycash 3y ago>Apple forbids you from using any cloud backup solution other than theirs If this is true, how is that legal?
- aryaneja 3y agoYou seem to have written a very misleading comment. Apple is offering privacy minded folks two options: 1. Don't turn on iCloud Backups and receive E2EE on your messages 2. Turn on iCloud Backups AND advanced data protection and recieve E2EE on your messages This is not some kind of nefarious plan on their end. Any user service will have a vulnerability on the user end of back-ups. For instance, Whatsapp backups will also have their keys available to Apple/Google. They need to offer this as for most users, the risk of losing their whole digital lives because they forgot their passwords outweights E2EE. For users who find that important, they have the two options listed above. Sounds like an appropriate trade-off to me.
- modeless 3y agoiPhones with iCloud backup enabled without ADP are almost certainly the majority. I believe this is essentially the default configuration. Even if you disable backups or enable ADP Apple almost certainly still has most of your messages from the other end of the conversation. It is false advertising to claim your service is E2EE without any disclaimer when in reality you collect the keys to the majority of messages and decrypt them at the request of law enforcement.
- aryaneja 3y agoI have addressed your concern in my comment > They need to offer this as for most users, the risk of losing their whole digital lives because they forgot their passwords outweights E2EE. There is no clear trade-off that is an option.
- modeless 3y ago"I can't imagine a way for this feature we advertised to not suck" is not an excuse for false advertising! But there is a way to do better. Google's Android backup is E2EE by default. It does not require remembering a long password. All it requires is your phone unlock code, which you normally enter at least once per day and are extremely unlikely to forget. This is actually how Apple's works too, when ADP is enabled. Either it should be enabled by default or Apple should stop claiming iMessage is E2EE.
- tick_tock_tick 3y agoSounds like you're just confirming Apple tries very hard to make sure it's not E2EE.
- katbyte 3y agoTurning on advanced data protection is not hard.
- the_gipsy 3y agoJust because WhatsApp does it too, doesn't make it right. These apps are not e2ee if almost every user has in effect encryption disabled.