3 ms·
Could you explain how MDM would breach E2EE? I know that it can be used to MITM TLS connections, but not aware of a way it would breach E2EE like Signal.
by d1sxeyes 11mo ago
Could you explain how MDM would breach E2EE? I know that it can be used to MITM TLS connections, but not aware of a way it would breach E2EE like Signal.
- m-hodges 11mo agoIt doesn’t breach E2EE; it gives your employer control over the device. Once messages are decrypted on the phone so you can read them, anything your employer deploys via MDM (screen capture, keylogging, backup/forensics tools, admin unlock, etc.) can potentially copy them. On a company-owned, fully managed device, you should treat MDM as roughly equivalent to handing your boss an unlocked device: anything you can see on-screen could be captured or exfiltrated by tooling they deploy.
- d1sxeyes 11mo agoAh. In the EU, folks are mostly protected against that kind of overreach, even if the phone is a work device: https://globalfreedomofexpression.columbia.edu/wp-content/uploads/2017/09/CASE-OF-B%C4%82RBULESCU-v.-ROMANIA.pdf https://globalfreedomofexpression.columbia.edu/wp-content/up...