They say the same thing about some of the other data that they encrypt, but then they store the encryption private keys on their servers.
Encryption doesn’t mean they can’t see the data. It means only the people with the private keys (and those who can crack the private keys or a device with the private keys) can see the data.
One must know if the data is encrypted both at rest and in transit. What type of encryption is used. Where the private key is stored. And what are the protections in-place where the key is stored
They do outline all of that, explaining how it works. The private key pair and secret are never sent to Apple. And yes, it’s end-to-end encrypted of course.
They say the same thing about some of the other data that they encrypt, but then they store the encryption private keys on their servers.
Encryption doesn’t mean they can’t see the data. It means only the people with the private keys (and those who can crack the private keys or a device with the private keys) can see the data.
One must know if the data is encrypted both at rest and in transit. What type of encryption is used. Where the private key is stored. And what are the protections in-place where the key is stored
They do outline all of that, explaining how it works. The private key pair and secret are never sent to Apple. And yes, it’s end-to-end encrypted of course.
https://help.apple.com/pdf/security/en_US/apple-platform-security-guide.pdf
Page 202 of you care to learn how it works.
Is the source code public so we can verify the implementation matches the spec?
deleted by creator
With proprietary software you have no way of knowing. Also avoid SaSS (service as a software substitute)