Thursday, January 28, 2021

Messaging Applications

  Recent changes in privacy policies from WhatsApp caused users to access their privacy need in messaging apps. This caused Signal to onboard new customers leaving WhatsApp.

 SMS messaging might be fine for messages. Other means might require more care. Options to consider: WhatsApp, Signal, Telegraph, Threema are a few of the choices. Really more secure methods are used by others with special needs. 

 Options that tout end-to-end encryption require that the provider should be unable to read/see your message. They have the meta data but not the encryption key.

 With the change in privacy policy by WhatsApp security and privacy researchers have given most other options a closer look. 

 Apple's iMessage has changed their privacy policy as well. Using Apple's iMessage with iCloud backup stores the encryption key. Thus law enforcement can warrant the key and thus the iMessage store. That may give you pause. Apple's reason - customers who forget their Apple account passphrases/passwords would not be able to recover their data and messages if they and only they held the encryption key. Apple had the policy that only the customer would hold the key but reverted due to passphrase/password reset concerns.

 If you desire full end-to-end encryption for your iMessage data, consider disabling iCloud access/backup for iMessage data







 You will need to investigate your other message applications to ensure their policy and procedures match your requirements.

If you wish to have your iPhone local backup encrypted via iTunes or Finder




Note: The encryption is data in transit. If someone gains access to your device and/or the recipient's device via theft or spyware they will have access to the message data.

No comments:

Post a Comment