2 ms·
Lots of largely baseless speculation here about WhatsApp MITMing end-to-end encrypted chats and other hypotheticals, when the most likely government access path
by lxgr 1y ago
Lots of largely baseless speculation here about WhatsApp MITMing end-to-end encrypted chats and other hypotheticals, when the most likely government access path is right there in the open:
WhatsApp heavily nudges users into backing up their chats to iCloud or Google Drive. These backups are, by default, unencrypted (or at least encrypted using a key known to Meta). And most users just use the defaults.
It's exactly the same story with iMessage: If "iCloud Backup" and "iMessage in the cloud" are activated (again, Apple nudges users into these by default), all received messages get uploaded to Apple using a key available to Apple, unless "Advanced Data Protection" is also enabled (decidedly not the default).
Users can deviate from these defaults (and both parties to a conversation need to, for the conversation to actually be private!), but they can already also just use Signal if sufficiently motivated.