Hey folks! I have a question on how Advanced Data Protection works. When it's enabled, the iCloud data is end-to-end encrypted and Apple does not have access to that data. When you use iCloud web and give temporary access through a trusted device, is that still true? Is the data still end-to-end encrypted? Does the data get decrypted on my browser, or on Apple's servers?
Thank you! I looked into the network requests, and I can confirm that the decryption is indeed happening on Apple's servers when temporary access is given. Oh well, another reason to switch exclusively to Apple devices I suppose.
See the screenshot below for an example. I have a file named "cv.pdf" in this folder, and you can see the name of the file in the response from the server. The file contents were also sent decrypted from the server once I clicked to view the file.
Hello!
That is a great question.
When you use a trusted device to temporarily allow access to data on iCloud.com your data is still end-to-end encrypted. Since your encryption keys are stored on-device, and iCloud.com does not have access to them by default, approval is required to allow your web browse and Apple to have temporary access to data-specific encryption keys provided by your device to decrypt and view your information.
Although unfortunately I cannot find specific information on whether the data is decrypted on your browser, or in an Apple server.
For more info, check out this article: iCloud data security overview - Apple Support
I hope this helps!
-Drake
Does Apple get access to my data if I give temporary access for iCloud web when Advanced Data Protection is enabled?
