3 ms·
Are push notifications end-to-end encrypted? I had been assuming for a long time that they probably were, but now I'm realising this might not be the case.
by TazeTSchnitzel 3y ago
Are push notifications end-to-end encrypted? I had been assuming for a long time that they probably were, but now I'm realising this might not be the case.
- ratg13 3y agoWhat ends are you referring to? You send the notifications to Apple/Google and they send the messages out to the app users. If you think that you are one end and the app is the other end, you likely misunderstand the system.
- dagmx 3y agoThis exploit doesn’t rely on knowing the contents of the notifications necessarily. Some notifications aren’t encrypted and they’re obviously more exploitable. But in this case, just the use of the unencrypted metadata is enough to narrow down people of interest. So even if you don’t know what it contains, you can still get valuable information like general location and usage patterns by effectively just observing that the notification happened and how it was handled.