UK government demands access to Apple users' encrypted data
www.bbc.co.uk
The Home Office served the notice to the tech giant under the Investigatory Powers Act.

UK government is trying to get into iCloud end-to-end encryption. (Again?)

Makes me think about email servers too. Most of my private information is in emails, and not only I use a service where the host machines access the email, so do almost everyone I email to/from.

  • milicent_bystandr@lemm.eeOP
    1·
    4 hours ago

    Thanks for the well-meaning advice.

    The recovery password in iCloud to stop even Apple accessing it is exactly what the UK is trying to undermine. It protects you - for now.

    I tried to start using pgp for email years ago, the problem is of course adoption by everyone you’re communicating with, be that personal, corporate or official. I got one friend to make a gpg key! And most email servers, as I understand, pass to each other with TLS, and the connection from your computer to your email service is encrypted. The problem is the emails at rest on both ends, including hosted by the email provider. Moving my email off Fastmail, whether to something like Protonmail or stored only on my computer, would remove one particular attack surface.

      • milicent_bystandr@lemm.eeOP
        1·
        2 hours ago

        Wow, thank you for this! But it looks like IMAP and POP, not server-to-server. And how would one of these severs compromise security if not one of the end points?