3 ms·
No, you're just confused.
by lapcat 2y ago
No, you're just confused.
- lxgr 2y agoI really am! I guess you're not interested in a good-faith attempt at clearing up that confusion, though.
- lapcat 2y agoI've tried, but you refuse to believe me! iCloud Keychain is end-to-end encrypted. By design, Apple can't decrypt anything, including the metadata. This has been discussed in many places, both by Apple and by others, not just in the one document I linked. The information downloaded in your privacy archive is not your iCloud Keychain data. It's the data related to your apple.com passkey that you use to login to Apple sites and services.
- lxgr 2y agoOh, I was wondering if it was that in the other thread! But in that case, this really is just how passkeys work. The public key is the passkey, and clientId is a "key handle" (sometimes it's the private key encrypted with some root key stored on the hardware authenticator; sometimes it's just a database ID). The device UDID should definitely not be available to relying parties though (WebAuthN is privacy-focused; the only allowable identifier is one that's shared across at least 100 000 devices), so it's confusing that Apple lists yours in their data export. My export is currently pending; I'm curious to see what they're storing for me.