In what way could iMessage's encryption be better than TLS? Which improvements, specifically, could make it better than TLS? I was under the impression that TLS is state-of-the-art.
iMessage was advertised to protect the user's message in such a way that even Apple couldnt't read them, even if they stage a man-in-the-middle attack.
(disclosure: I have not read the article)
https://github.com/WhisperSystems/libsignal-protocol-java
Edit: Some more pointers for those interested: https://whispersystems.org/blog/signal-inside-and-out/
but basically totally broken by design.
http://www.interworx.com/community/is-ssl-tls-broken/
further tls:sender,recipient and server can read the message
end to end:only sender and reciever can read the messages even though a sever facilitates connecting them to each other.
> but basically totally broken by design.
> http://www.interworx.com/community/is-ssl-tls-broken/
"Secondly, there’s the implementation. This is a bit more tricky because there’s plenty of scope for influencing either the software implementations or the standards upon which that implementation is based." vs. http://www.theregister.co.uk/2015/09/15/still_200k_iot_heart...
And if you think the vulnerabilities of the shocking state of openssl stop at heartbleed (which is as obvious as backdoors get), you've obviously not given the code even a cursory glance over.
https obviously greater than http But if you trust it with your life you wont have a life. It's as simple as that. (and tls is basic compared to tor, and even that we have seen is broken to hell and back, or silkroad would still be running.)
Signal and especially OTR are the current state of the art. Apple went the security by obscurity route and once again proved it's inferior.