28
Blog - Advancing iMessage security: iMessage Contact Key Verification - Apple Security Research
security.apple.comiMessage broke new ground in 2011 as the first widely available messaging service to provide secure end-to-end encryption by default. Ever since, we’ve been making ongoing improvements to iMessage security to protect our users’ most sensitive communications. This brief technical overview introduces the security model behind iMessage Contact Key Verification, a new feature available in the developer previews of iOS 17.2, macOS 14.2, and watchOS 10.2, that advances the state of the art of key directory security in messaging systems and allows users to verify they’re messaging only with the people they intend.
Well, this looks good for iPhone users, at least.
Small point of contention:
I think getting notified that someone has switched to a different device, even if you had not previously verified their keys, is potentially valuable. I’m not sure why Apple says this as if it has no value.
Signal is also not a great comparison, because the entire system has a single point of truth, the user’s current phone. Everything else, such as the desktop and iPad app, run through the phone as the primary source of verification.
A better comparison would be with Matrix, and all things considered, Matrix has needed a massive overhaul in terms of device verification for a long time. If Apple implements this, it’ll probably blow Matrix out of the water in terms of usability and lack of frustration.
Of course I will never be able to tell, because like signal, you require a mobile phone to actually use iMessage… and the phone must be an Apple one, of course. Unless somebody hands me an iPhone for free, I probably won’t ever check in on this.
Update: the “automatic verification” Apple proposes looks like it works, from a thousand foot view, the same way unverified Signal contacts do.
Except Signal does it by default… and it looks like iOS requires opt-in.
Opt-in on both sides of every conversation for maximum functionality.
What do you mean with, I need my phone for the Desktop app for Signal? Well, first for copling but after that you can throwbaway your phone and still Chat, call and use stories.
Right. Sorry if I didn’t make that clear. The key management starts on your phone, but then can be expanded to multiple desktop clients that don’t need your phone after the configuration step.
Meanwhile, on both iMessage and Matrix, key management is much more dynamic, but Matrix keeps it more decentralized (ie, on users’ devices) than iMessage does.