zlacker

>>pera+(OP)
I hope one day apps like Signal will be the default for everyone, not just protesters in a time of crisis.

>>matheu+X2
will only happen if phone manufactures ship them by default rather than the unsecure by default ones they ship atm.

Sounds crazy when I say it outloud...

>>senect+a3
iMessage is end to end encrypted by default. Perhaps not as strongly, but it's a good default to begin with.

>>RL_Qui+36
Key management is still centralized and controlled by Apple, so they can still MITM communications by messing with the key exchange.

iCloud backups (enabled by default) are not end-to-end encrypted.

So while it's technically E2E, in practice you get very little protection from it because it's broken by design.

I still use iMessage because of the user experience, but let's not be fooled by their misleading E2E claims; it's all just marketing BS.

>>Nextgr+j6
If both parties disable iCloud on their phones, does Apple have any way to read messages sent via iMessage?

>>ciaran+G6
They can still pull off an MITM attack by sending the MITM’s keys (pretending to be the other user’s keys) because they control they key exchange.

It’s an active attack and can’t apply retroactively but within these constraints they can still do it.