3 ms·
Since 2022 they rolled out icloud end to end encryption meaning whoever runs the data center in china doesn't get to snoop if you switch it on.
by throwaway290 1y ago
Since 2022 they rolled out icloud end to end encryption meaning whoever runs the data center in china doesn't get to snoop if you switch it on.
- bigyabai 1y agoChinese iCloud servers do not have HSMs, which means that the encryption keys are all stored server-side, domestically, in plaintext. Enabling data protection will not save you if, like in China, your government demands backdoored servers.
- avianlyric 1y agoWhat do HSMs have to do with anything? Using HSMs doesn’t make it harder for a provider to decrypt your data, they can just ask the HSM they control to decrypt your data whenever they want. HSMs exist to make it harder for outsiders to exfiltrate keys, not make it harder for insiders to decrypt stuff. I can’t speak for China. But outside of China iCloud E2E uses keys that are only stored on customer devices. I.e. your iPhone is the HSM. In theory iCloud needs zero crypto capabilities server side, because all the crypto happens client side, and servers are just moving opaque encrypted blobs around.