Hacker News new | ask | show | jobs
by sandgiant 1202 days ago
I'm curious about this too. At least now I have fairly decent confidence that when I send an iMessage to someone, Apple protects their identity to whatever standard they have. Whatever trust I put in Apple, at least it's a single point of failure.

What happens if interoperability is enforced and messages have to be end-to-end encrypted? Wouldn't that mean that any side-loaded Android app would have to be able to get hold of my friend's private iMessage key?

On iOS I guess you could still keep the key private through Apple's SDK, but what about other platforms?

4 comments

The protocol is just registering a public key for each device to the server-side directory. A device-specific private key is generated and kept client-side on every device that logs in to iMessage.
Of course, that makes sense. So you could revoke the key for each app individually.
Why would a side-loaded Android app get a hold of a binary blob owned by another app, without the user granting such access explicitly?
You can continue to put your trust in only Apple: the DMA also says users should be able to enable and disable interoperability.
> On iOS I guess you could still keep the key private through Apple's SDK, but what about other platforms?

It's such a huge win for Facebook and Google - I'm not worried about "sideloaders", it lets them crack open the privacy of iMessage by simply having a view on conversations they can't see under the guise of interoperability.

The EU are just rolling a surveillance capitalist's wet dream with rulings like these.

Do you have any actual facts so this doesn't look like just another uninformed conspiracy theory in this thread?