3 ms·
> A good example is iMessage's use of device keys for parties of a conversation, without the use of a central key that lives on Apple's servers. They cannot be
by runeks 12y ago
> A good example is iMessage's use of device keys for parties of a conversation, without the use of a central key that lives on Apple's servers. They cannot be compelled to turn over the master key, and no one can steal the key either.
I'm not intimately familiar with the security of iMessage, but Apple controls the key server, as far as I understand. Can't law enforcement just compel Apple to make their key server respond with a public key owned by the NSA, instead of the public key of whichever device wants to receive the secret information?
- skuhn 12y agoYeah, that is my main worry about their strategy as well. A public key server and visibility into the keys selected for a conversation could solve this, but the usability cost would be gigantic. I think it's pretty tough to make something elegant and simple without centralization, but hopefully it will happen some day.