Does Apple really log every app you run? A technical look

Re:Does Apple really log every app you run? A technical look by sneak on Sunday November 15, 2020 @04:51PM (#25105258)

A network intermediary blocking or altering the TLS is an active attack. Plain HTTP is also vulnerable to that, so unauthenticated TLS is no worse than the current situation.

TLS encrypts the payload just fine if you want that. That’s what TLS is for.

PS: You don’t encrypt something to someone else using your own public key.

[ Parent | on HN ]

Re:Does Apple really log every app you run? A technical look by angry_octet on Sunday November 15, 2020 @08:14PM (#25106834)

I'm talking about when they block just the ocsp host TLS port. Heaps of places whitelist https for particular sites, and inspect the content to prevent TLS. Appliances that block TLS via packet inspection are dime a dozen. But the query/response fields can be an opaque encrypted blob and it would get through. Every Apple device obviously has the Apple pub key, and hence they can send encrypted messages back to Apple without needing any further PKI.

[ Parent | on HN ]