Hacker News new | ask | show | jobs
by bad_user 4031 days ago
That is correct, iMessage is encrypted, however they still have your metadata (who you're speaking with, timestamps) and because of how iMessage works (asymmetric cryptography with multiple public keys managed by Apple), it's easy on Apple's side to attach a new public key and device to your account such that anybody can then listen to the messages sent to you. And so, because you can't settle on a specific public key with the person you're talking with, the model is kind of broken, although it is better than nothing.

XMPP / OTR is a much better option for encrypted chats. It's fairly user friendly as well. Unfortunately big companies owning chat services are not fans of open standards.

1 comments

Cool, thanks for the explanation.