SoylentNews

fliptop [soylentnews.org] writes:

Apple is expanding its iCloud security features and introducing support for security keys for two-factor authentication [theverge.com]:

Apple will finally be adding end-to-end encryption to iCloud backups, the company said as part of a major set of security announcements on Wednesday. Under what it calls Advanced Data Protection, Apple will expand the number of “data categories” protected by end-to-end encryption from 14 to 23, with backups, Notes, and Photos now covered.

Based on a screenshot from Apple, these categories are covered when you flip on Advanced Data Protection: device backups, messages backups, iCloud Drive, Notes, Photos, Reminders, Safari bookmarks, Siri Shortcuts, Voice Memos, and Wallet Passes. Apple says the only “major” categories not covered by Advanced Data Protection are iCloud Mail, Contacts, and Calendar because “of the need to interoperate with the global email, contacts, and calendar systems,” according to its press release.

Note that this system doesn’t have the backdoor that was in Apple’s previous proposal, the one put there under the guise of detecting CSAM. iCloud data security overview [apple.com]. Originally spotted on Schneier on Security [schneier.com].

Previously: Apple Reportedly Nixed Plan for End-to-End Encryption in iPhone Backups [soylentnews.org]

Original Submission