It's worth re-reading this post by Matthew Green, "Can Apple read your iMessages?" [1] For one, if you back up your device with iCloud, then yes, Apple can rea

It's worth re-reading this post by Matthew Green, "Can Apple read your iMessages?" [1] For one, if you back up your device with iCloud, then yes, Apple can read your iMessages. This has been verified by experiment. Second, Apple operates a central directory of iMessage public keys mapped to accounts, and this enables various kinds of MiTM attacks. Contrast this with the way TextSecure / RedPhone does contact discovery using blinded signature queries [2]. Third, iMessage and iOS are closed source. Ultimately, closed source can do whatever the heck it wants. Not just what they're telling you it does. All the same, we now have some new details on iMessage from Apple [3], and I'm looking forward to hearing the crypto experts pick it apart. [1] http://blog.cryptographyengineering.com/2013/06/can-apple-read-your-imessages.html http://blog.cryptographyengineering.com/2013/06/can-apple-re... [2] https://whispersystems.org/blog/contact-discovery/ https://whispersystems.org/blog/contact-discovery/ [3] http://images.apple.com/iphone/business/docs/iOS_Security_Feb14.pdf http://images.apple.com/iphone/business/docs/iOS_Security_Fe...