You're putting words in my mouth. I never said they were encrypted. I said that Apple deliberately misled developers about the surveillance functionality by pushing whitepapers that do not accurately describe how these systems work. This prevents developers from protecting their users and creates confusion around how Apple services operate.

Even if it was E2EE - trusting Apple with proprietary crypto is like trusting Microsoft to not backdoor Bitlocker. It requires a specifically-qualified moron who doesn't respond to technical arguments and only understands marketing language.

Your literal words are

> All they'll do is give us whitepapers on how things should work, which we know has been fabricated at least once in the case of Push Notification backdoors

I’m asking for evidence of your own claim. Apple do not claim that everything is encrypted, they specifically call out various aspects as being unencrypted.

Okay so you literally can’t point to the fabrication and can’t make a cognizant argument without denigrating the other persons questions or argument. Have a nice day raging into the wind.

Respectfully, I think you’re drawing an incorrect inference.

They don’t exhaustively list all risks and perils, but that risk was known to me personally and documented by Apple at least circa 2020 — I worked with some third party developers to provide options to keep potentially high risk data out of APNS messages. Similar risks exist for Google’s platform. I’m not some genius with access to arcane knowledge, but if you’re doing your job it’s part of your risk assessment.

Judging by your very technical closing comment, this has no weight on your opinion, but I appreciate your taking time away from auditing Veracrypt or LUKS to read this.

Yeah I'm just a lowly indie iOS app developer but I remember way back in iOS 10 when Push Notification Service Extensions were introduced and one of the examples used (indeed, in the current documentation as well) was to be able to have the contents of push notifications be encrypted over apns and decrypted on-device.