HT202303: iCloud security and privacy overview

Learn about iCloud security and privacy overview
applesuppnev
Level 1 (8 points)
iCloud

Q: ICloud encryption process?

So data and files are NOT encrypted on the client device before transit?  Is it true that they are just encrypted during transit, then received by iCloud, then encrypted on iCloud for storage? The Apple employees I have talked to are all pretty confident about "we can't even see your files", but the encryption description page doesn't suggest that.

 

The next question would be metadata. Is that obfuscated, or not?

 

--------------------------------  Unencrypted File -------------------------------------

 

Offer to Buy Kimbo Industries.doc

 

Hi Fred, we are prepared to offer $2,000,000,000 for your company.

 

 

--------------------------------  Encrypted Contents only -------------------------

 

Offer to Buy Kimbo Industries.doc

 

9koid%fm4u98v9%85v9n7cf95ulicdjooiwhysw@(nvowucec129dgfoi8

 

 

--------------------------------  Encrypted contents and meta-data -----------

 

j48dfhje87ay33cn9p484pny3#oi8u!sc

 

9koid%fm4u98v9%85v9n7cf95ulicdjooiwhysw@(nvowucec129dgfoi8

MacBook Pro, OS X Mountain Lion (10.8.5), Samsung 840 Evo SSD

Posted on May 18, 2016 4:43 PM

Close
applesuppnev

Q: ICloud encryption process?

  • All replies
  • Helpful answers

  • by LACAllen,

    LACAllen LACAllen May 19, 2016 7:10 PM in response to applesuppnev
    Level 5 (4,643 points)
    iCloud
    May 19, 2016 7:10 PM in response to applesuppnev

    I am not sure I understand your point/question.

     

    Apple employees don't have access to your iCloud data in any way. unless they are screen sharing with you and you display it to them.

     

    Where is it you feel they are seeing your files?

     

    iPhone local data is encrypted locally and has been since the iPhone 3GS.

  • by applesuppnev,

    applesuppnev applesuppnev May 19, 2016 7:55 PM in response to LACAllen
    Level 1 (8 points)
    iCloud
    May 19, 2016 7:55 PM in response to LACAllen

    It's a simple question if you understand encryption. 

     

    For upload to iCloud, what is getting put on the wire before the SSL encryption takes place?  ... the clear-text unencrypted file, or an encrypted blob? 

     

    What is received on the other end after SSL decryption? ... the clear-text file, or an encrypted blob?

     

    >> Apple employees don't have access to your iCloud data in any way. <<

     

    What do you base this on?  What facts or references? 

     

    Is Apple iCloud a zero-knowledge cloud provider (like SpiderOak), or one of the many "just trust us" providers?

  • by LACAllen,

    LACAllen LACAllen May 19, 2016 8:07 PM in response to applesuppnev
    Level 5 (4,643 points)
    iCloud
    May 19, 2016 8:07 PM in response to applesuppnev

    Yeah... I am tapping out.

     

    Sounds like you have an agenda here. I don't believe you will get answers for those questions here or anywhere else.

  • by applesuppnev,

    applesuppnev applesuppnev May 19, 2016 9:29 PM in response to LACAllen
    Level 1 (8 points)
    iCloud
    May 19, 2016 9:29 PM in response to LACAllen

    I have no idea what you mean by me having an agenda.  What possible agenda are you talking about?  Just because you don't have clue about encryption I have an agenda?  I am asking about how safe it is to use iCloud.  I don't want some empty promise, I want to know the process.  All the other cloud services provide this info.

     

    me: Does the Ford Focus have 4-wheel drive?

    you: Ford says the Focus never gets stuck!

     

    me: But does it have 4-wheel drive?

    you: it has 4 tires

     

    me: but does it have 4-wheel drive?

    you: YOU HAVE AN AGENDA!!