4 ms·

iMessage is in no way NSA-proof: http://blog.cryptographyengineering.com/2013/06/can-apple-read-your-imessages.html http://blog.cryptographyengineering.com/201

by chmars 13y ago

iMessage is in no way NSA-proof: http://blog.cryptographyengineering.com/2013/06/can-apple-read-your-imessages.html http://blog.cryptographyengineering.com/2013/06/can-apple-re... tl;dr: * Apple distributes the encryption keys * Multiple keys can be associated with an account (iPhone, Mac – and the NSA?) * Apple can retain metadata * Apple doesn't use certificate pinning

simonster 13y ago
My understanding is that this isn't that bad. If you use iCloud, then the NSA can read your old messages. If you don't sync your iMessages with iCloud, under the assumption that not every iMessage gets encrypted to an NSA key in addition to the recipient's keys, your messages are safe until the NSA/other law enforcement explicitly targets you, and even then, they can only read new messages and not previous ones.