[ninjay]

> The private key is encrypted with the user's password, which is not retained by Apple except in a hashed form.

> the private key is decrypted using the password and sent to the device.

wait, where is this private key coming from then? your other devices?

[nknighthb]

Either Apple would generate it server-side, or the first device to "sign up" would generate it.

Remember, I'm only explaining a hypothetical method by which the Apple system could work, consistent with Apple's statements and behavior I've observed from my iPhones, iPads, and Macs. It's not an explanation of a strictly secure system.

[ninjay]

> would generate it.

where is it stored though?

[rdouble]

in the Keychain

[ninjay]

sigh

[nknighthb]

Did you fundamentally misinterpret my sentence? The password is not retained by Apple, the private key is retained, in encrypted form.