4 ms·
You're not disagreeing with what the article said. The article claimed (rightly or not, I cannot comment) that the iPhone software claimed to the Exchange serv
by kwantam 17y ago
You're not disagreeing with what the article said. The article claimed (rightly or not, I cannot comment) that the iPhone software claimed to the Exchange server that it did support encryption, then just didn't encrypt anything.
I don't believe for a second that "everyone in corporate IT" knew this and yet allowed their users to connect with iPhones and endanger the security of the network.
Again, I don't know that the article's claims are accurate, but your comment clearly does not clash with the aforementioned claims.
- DrJokepu 17y agoAs a Microsoft fanboy it's hard for me to acknowledge this, but I think there is a bit of a problem here on Exchange side's as well. If I unerstand correctly, it asks the device if it supports on-device encryption of data and then trusts that the device claims the truth. I think the problem with this approach is that the security of the network is no longer in the hands of the network's administrators, even though they might have the reason to believe so since they have set up Exchange to enforce on-device encryption even though it can't possibly enforce that in all cases and as the iPhone example shown it, this is not just a theoretical problem.
- dkarl 17y agoIt prevents honest mistakes. Here, somebody wasn't honest. I wonder what will happen to the guy at Apple who made the decision to set the "Yes, we're encrypted!" bit. (Probably he'll be forced to fire whoever he issued the order to. Poor guy!)
- Kaizyn 17y agoWhy? Apple will just fix the bug or have their sales reps say they're sorry and fix the bug. End of story.