news.volyx.in

Apple introduces end-to-end encryption for backups (support.apple.com)

1587 points by frizlab · 1369 days ago · 1043 comments on HN

Article summary

Apple has introduced end-to-end encryption for iCloud backups, providing an additional layer of security for user data. This feature is part of Apple's Advanced Data Protection for iCloud, which offers the highest level of cloud data security. With end-to-end encryption, only the user's trusted devices can access and decrypt their data, and not even Apple can access it. This feature is available for various data categories, including iCloud Backup, Photos, Notes, and more.

Main themes

  • End-to-end encryption
  • iCloud security
  • Government surveillance
  • User data protection
  • Hardware security keys
  • Apple's security efforts

What commenters say

  • The introduction of end-to-end encryption for iCloud backups is a significant improvement in user data security, but it may face pushback from law enforcement and governments.
  • The previous CSAM scanning debacle was likely a precursor to Apple's end-to-end encryption efforts, with some speculating it was a way to appease law enforcement while introducing stronger encryption.
  • Some argue that on-device scanning is still a backdoor for government surveillance and control, while others see it as a necessary compromise to enable end-to-end encryption.
  • The use of hardware security keys, including third-party options like YubiKeys, is seen as a positive development for user security, but some question its relevance to end-to-end encryption scenarios.
  • There are concerns that the Chinese government will require backdoor access to user data, undermining the security benefits of end-to-end encryption.
  • Some users want more control over their devices and data, including the ability to access and examine their device's inner workings and firewall it if desired.
  • Others argue that local backups, such as to a Mac or Windows computer via iTunes, are a viable alternative to iCloud backups and do not require internet connectivity.