3 ms·
You're missing the part where "custom client" means you aren't using an Apple device at all, if you don't want to be. This is like sending a PGP message over g
by lawnchair_larry 13y ago
You're missing the part where "custom client" means you aren't using an Apple device at all, if you don't want to be.
This is like sending a PGP message over gmail using mutt on linux via IMAP. Google owns gmail, but they can't backdoor you or read your message in this scenario. Any non-broken secure messaging protocol should have this property, regardless of if people use it that way. This is what end-to-end encryption means.
- sjwright 13y ago> Any non-broken secure messaging protocol should have this property Okay then, tell me how you could build a system that * Guarantees secure transmission of public keys * Can be installed safely on a closed-source operating system * Is impervious to the whims of the hardware vendor or the operating system vendor * Is sufficiently straightforward that mums everywhere will happily use it * Doesn't require users to become security experts Given the practical realities Apple has to contend with, I think they've done a pretty good job -- certainly a lot better than what anyone could have expected, arguably a lot better than anything comparable that has come before it.
- lawnchair_larry 13y agoNo, Apple has definitely done worse than what we have expected. Worse, they haven't provided what they claimed. That being a secure end-to-end messaging protocol. This discussion about backdooring applications isn't even interesting or relevant here. The protocol itself is not secure.