News for hackers. Stuff that matters.
Re:Google Fights Back by orhmeh09 on Wednesday May 08, 2019 @03:08PM (#19861888)
I don’t see Apple having access to keys there. Could you point it out? CTRL+F for “key” came up with 7 results but nothing to suggest Apple holds them and can decrypt. Apologies.
Re:Google Fights Back by fauigerzigerk on Wednesday May 08, 2019 @03:46PM (#19862205)
There's a section about half way down that lists all end-to-end encrypted data (keychain, health, payment data, ...).

By implication, all other data is not end-to-end encrypted. That includes iCloud drive, photos, calendar, contacts and mail.

Re:Google Fights Back by MertsA on Wednesday May 08, 2019 @07:19PM (#19863880)
Also one big deal is how Apple handles key distribution. They absolutely could MitM that connection to get access to the user's keychain and the UI doesn't really give the user any feasible way to detect that Apple has added their own key instead of just the key for your other device that Apple doesn't control. It's "end to end encrypted" but if you just handwave away key distribution and leave that up to Apple, what's the point other than a marketing gimmick?
Re:Google Fights Back by eunoia on Wednesday May 08, 2019 @04:38PM (#19862675)
Are we reading the same support article? https://support.apple.com/en-gb/HT202303

Specifically listed as encrypted in transit and on server:

- iCloud Drive

- Photos

- Calendar

- Contacts

Only mail is not according to this support article.

Edit: I see the omission now. These things are not listed under the end-to-end section.

Re:Google Fights Back by fauigerzigerk on Wednesday May 08, 2019 @05:08PM (#19862965)
Yes, exactly, so that data is encrypted on the server using a key that is in Apple's possession.