Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

No AES, only RC4 encryption used in iCloud?

Hi,


I read the article about iCloud security, and that at least AES-128 encryption is used when communicating with iCloud:

http://support.apple.com/kb/HT4865?viewlocale=en_US&locale=en_US


However, when trying to verify that, it seems that only RC4-128 is used, at least for contacts and calendar synchronisation.

See for example the caldav.icloud.com server, which is used by iCal on Mac OS X and the iOS calendar apps:

https://www.ssllabs.com/ssltest/analyze.html?d=caldav.icloud.com&s=17.172.116.75

Under handshake simulation, you can only find RC4 encrpyption, which is said to be completely broken and much less secure than AES.


Am I seeing something wrong, or is the statement that at least AES-128 is used, is currently not valid?


Regards

all Apple devices-OTHER

Posted on Jan 11, 2014 3:08 AM

Reply

There are no replies.

No AES, only RC4 encryption used in iCloud?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.