Ars Technica brings us today’s shocking privacy news: ‘Apple holds the master decryption key when it comes to iCloud security, privacy’. Oh my. The story is definitely worth a rea…
If you enable “Advanced Data Protection” (E2EE for your entire iCloud) Apple tells you they will not have the keys and you’re on your own if you lose access to all devices that hold them (or forget their passwords, respectively). This feature was introduced last year.
I mean, in 2012 they didn’t even have 2FA yet. Also IIRC they haven’t started really leaning into the privacy angle until maybe around 2019-20 publicly, and from there it probably wasn’t the highest priority item for the security team. Not excusing how long it took, but they are a business after all and with how scary the warnings around ADP are I doubt it’s a very marketable feature with a lot of reach.
If you enable “Advanced Data Protection” (E2EE for your entire iCloud) Apple tells you they will not have the keys and you’re on your own if you lose access to all devices that hold them (or forget their passwords, respectively). This feature was introduced last year.
That’s a nice addition for those that want security over convince. I wonder why it took them 11 years after this was written to add it.
I mean, in 2012 they didn’t even have 2FA yet. Also IIRC they haven’t started really leaning into the privacy angle until maybe around 2019-20 publicly, and from there it probably wasn’t the highest priority item for the security team. Not excusing how long it took, but they are a business after all and with how scary the warnings around ADP are I doubt it’s a very marketable feature with a lot of reach.