Re:iMessage's 'End-To-End' Encryption Hardly Better Than TLS
by MajesticHobo on Saturday August 13, 2016 @11:33AM
(#12281826)
It is. The title is a little misleading; here's an explanatory excerpt from the actual paper:
> In this work we analyze the iMessage
protocol and identify several weaknesses that an attacker
may use to decrypt iMessages and attachments. While
these flaws do not render iMessage completely insecure,
some flaws reduce the level of security to that of the TLS
encryption used to secure communications between end-
user devices and Apple’s servers.
> In this work we analyze the iMessage protocol and identify several weaknesses that an attacker may use to decrypt iMessages and attachments. While these flaws do not render iMessage completely insecure, some flaws reduce the level of security to that of the TLS encryption used to secure communications between end- user devices and Apple’s servers.