Apple Is Trying to Make iMessages More Private

Re:Apple Is Trying to Make iMessages More Private by voidmain on Sunday June 11, 2017 @03:52PM (#14533458)

The "HSM cluster" serves as a redundant "device" which is in Apple's possession rather than yours, but which you must trust to withstand tampering, even by Apple.

The option to record the keys yourself is also described in the whitepaper:

"If the user decided to accept a cryptographically random security code, instead of specifying their own or using a four-digit value, no escrow record is necessary. Instead, the iCloud Security Code is used to wrap the random key directly. "

As I said, I can't actually find this option in my iOS settings. Maybe you have to disable Keychain first?

[ Parent | on HN ]

Re:Apple Is Trying to Make iMessages More Private by learntofly on Sunday June 11, 2017 @06:59PM (#14534266)

I think this relates to a time before 2 Factor Authentication, when Apple used 2 Step Verification. You could st that time (if you were using iOS 6 to iOS 8) chose various recovery options.

I'm no expert but this is my recollection.

In the scenario where you have 2 devices, one is iOS 9/10 and have migrated from 2SV to 2FA, the other is iOS 6/7/8, you can still access the recovery menus on the iOS 8 device, but it does weird things to the keychain if you mess about with it.

[ Parent | on HN ]