Hacker News new | ask | show | jobs
by LeoPanthera 4376 days ago
Even iMessage uses end-to-end encryption. It's a pretty poor sign if it's less secure than the service already built into the phone.

(And yeah I know iMessage isn't open source and so this is difficult to verify, but "Talk" isn't open either. Apple published a big PDF about how they do encryption - if this were proved to be false it would destroy all trust in Apple forever, so I believe what they say.)

Big PDF: http://images.apple.com/ipad/business/docs/iOS_Security_Feb1... (See page 20)

tl;dr: "Apple does not log messages or attachments, and their contents are protected by end-to-end encryption so no one but the sender and receiver can access them. Apple cannot decrypt the data."

1 comments

Interesting, did not know that. Apple is still in a position to MITM the transaction if they wanted though (Telegram provides a key visualization that can be compared offline to prevent this)
Unless telegram changed their protocol recently, it's a fundementally flawed design. Telegram can also MITM you with their design too.