iMessage, completely end-to-end

Original link: https://blog.yitianshijie.net/2022/12/08/real-end-to-end-encryption-for-imessage/

3dd84179782d9f57210943aa1bf5064e?s=200&t

Apple ‘s upcoming “iCloud Advanced Data Protection” (Advanced Data Protection for iCloud) solves the long-standing problem of iCloud backups not being end-to-end encrypted. In “Is iMessage censored in China?” I wrote:

iMessage is an end-to-end encrypted messaging service, but iCloud backups are not end-to-end encrypted. So if you have iCloud backup turned on, you can assume that communications in iMessage are no longer end-to-end encrypted. If you think you are at high risk, or simply want an extra layer of protection, please turn off iCloud backup.

This iMessage loophole has finally been patched. When iCloud Advanced Data Protection is turned on, iCloud backup data will also use end-to-end encryption. But I don’t use iCloud backup, because iCloud space has long been filled with photos and videos. In addition, iCloud Advanced Data Protection is a feature only available in the upcoming iOS 16.2 and macOS 13.1, and it is likely to be turned off by default. So if either party in an iMessage conversation hasn’t upgraded or manually turned on this feature, technically you still can’t assume your conversation is fully end-to-end encrypted. (It is conceivable that 16.2 has canceled the option to permanently open AirDrop to everyone globally, which will cause many users to refuse to upgrade out of resentment.)

On a practical level, most conversations are leaked not through cracked encryption, but through cheaper, lower-tech means. You can never guarantee that the person you are chatting with will always have good security awareness and sufficient security knowledge.

( Click here to read the vertical layout)

This article is transferred from: https://blog.yitianshijie.net/2022/12/08/real-end-to-end-encryption-for-imessage/
This site is only for collection, and the copyright belongs to the original author.