3
iCloud: Who holds the key? (2012)
(blog.cryptographyengineering.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 26 Aug 2024
3 points (57.9% liked)
Programming
17314 readers
384 users here now
Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!
Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.
Hope you enjoy the instance!
Rules
Rules
- Follow the programming.dev instance rules
- Keep content related to programming in some way
- If you're posting long videos try to add in some form of tldr for those who don't want to watch videos
Wormhole
Follow the wormhole through a path of communities !webdev@programming.dev
founded 2 years ago
MODERATORS
If you enable "Advanced Data Protection" (E2EE for your entire iCloud) Apple tells you they will not have the keys and you're on your own if you lose access to all devices that hold them (or forget their passwords, respectively). This feature was introduced last year.
That's a nice addition for those that want security over convenience. I wonder why it took them 11 years after this was written to add it.
I mean, in 2012 they didn't even have 2FA yet. Also IIRC they haven't started really leaning into the privacy angle until maybe around 2019-20 publicly, and from there it probably wasn't the highest priority item for the security team. Not excusing how long it took, but they are a business after all and with how scary the warnings around ADP are I doubt it's a very marketable feature with a lot of reach.