that said, apple did add the option for end-to-end encrypted “advanced data protection” for the majority of icloud data a year or so ago.
perhaps they also enabled it by default in sonoma?
"For additional privacy and security, 15 data categories — including Health and passwords in iCloud Keychain — are end-to-end encrypted. Apple doesn't have the encryption keys for these categories, and we can't help you recover this data if you lose access to your account."
How do you know this?
My friend, I'm afraid I have no idea what you mean. What do you believe Apple claims they can't do that conflicts with this? (If your answer is "end-to-end encryption", Apple has supported this for at least a decade.)
"How do we validate claims of end-to-end encryption?"
It is a lot of trust to place in a company. I would be curious if there are ways to test Apple's claims?
I'm not a security expert, and you can't prove a negative, so AFAIK the only evidence is the lack of reported incidents where Apple's iCloud Keychain data has been directly hacked or compromised. Given that iOS and iDevices are among the highest-value targets for hackers and nation-states, that seems like reasonably solid evidence.
From a business perspective, lying about such a thing would have virtually zero upside but unimaginably massive downside. It's a great Apple-hater fantasy, though.
Thank you. That's exactly what I wanted to hear from you. The link you provided is in no way, shape or form actual evidence of what you're suggesting.
> From a business perspective, lying about such a thing would have virtually zero upside but unimaginably massive downside.
What are users going to do? Buy a Surface tablet and a Samsung phone?
> It's a great Apple-hater fantasy, though.
I just dipped my toe into the Apple waters again and bought an m1 air a year or so go. I'm currently shopping for a used iPhone.
I don't have brand loyalty and I use what works, and it just so happens that Apple has been making stuff that works pretty well in my opinion recently. But I'm under no illusion that I can trust them.
And we have plenty of historical examples, including recent ones, that big companies are simply lying through their teeth almost every time they open their mouths. Companies that rely heavily upon marketing are lying more so than others.
"Macs don't get viruses" claim made while several Mac viruses existed at the time. It's been lies for decades.
No, they didn't.
Anyway, iCloud Keychain has always been end to end encrypted.
iCloud Keychain is fine, just use a good password. There's no particular harm in letting Apple store an encrypted blob for you on its servers.