Key Verification in iMessage has finally arrived!

In which I get excited about Key Transparency and Contact Key Verification, two security features added to iMessage in today's iOS 17.2 update. Contact Key Verification on your iPhone prevents Apple from maliciously sending you compromised public keys when performing the initial key exchange in iMessage for end-to-end encryption.
Apple Security Engineering and Architecture blog: security.apple.com/blog/imess...
❤️ Support the work I do today, or join my newsletter: www.jonaharagon.com/#/portal/...
💛 Send a one-time donation on Ko-Fi: ko-fi.com/jonaharagon
0:00 iOS 17.2 Released
0:24 How End-To-End Encryption Works
2:40 Key Transparency
3:54 Manual Contact Key Verification
5:02 Enabling Verification in iMessage
🏠 www.jonaharagon.com
🪙 Monero: 45i7M1FfXuBHLMdWm4ZTvFM5tGTSeibjEBpFSBCs2qbSRrHkUpKN5DRVK7T65hbg3WhGXepH7y6Xvb8XdxBmBS8V4AJXtyC (www.privacyguides.org/en/adva...)
#apple #imessage #cybersecurity #jonaharagon

[@travellerseko]

I’m still missing something. If I share the code with the person on the other end, how does it protect us to know if that person legit or not. I still can’t understand the importance of sharing code.

[@GDitto]

You share it with someone you know, in person or over the phone. The best way is to both hit the verify contact button together.
What it does is if someone hacks the account and adds a device, it’ll say that someone could be eavesdropping because they’re from an unapproved device.
It’s basically s/mime for iMessage.

[@crowlsyong]

You did a great job explaining this. Thank you. Liked, subbed.

[@wizcombo]

Subscribed! You were able to deliver complex topic in a simplified manner. Keep it up

[@causalviewer]

Thank you for the information. The graphics made it easy to digest the information and you broke down the key points.

[@Victoria-ln1yf]

Hello, I hope someone can help me. I use iMessage (contact key information off) but I have a contact that doesn't appear that uses iMessage but when I get into my old (normal) messages it still doesn't appear that he uses iMessage, previously he didn't have iMessage but he used android but now that I want to send him a normal text message it appears below his information:
Advance message security
Turn on contact key verification.
What should I do and why does that appear to me?

[@fakeanimegirl]

will this make apps on android that allow them to send imessage not work anymore? such as bleeper and formerly sunbird

[@jonaharagon]

This feature specifically is unlikely to have any effect one way or the other on that, but I’m sure Apple is going to continue trying to block Android users in other ways 🙃

[@grant1437]

Obviously a bug within 17.2 as when I attempt to activate Contact Key Verification it shows my iPad Pro needs updating although it is on iPadOS 17.2 and I cannot continue?

[@donaldduck7268]

I had an issue with it also I reinstalled the os on all my devices. It may of happened because you were using betas like me.

[@jonaharagon]

Strange! I can’t say I’ve seen that, the message went away for me after updating all 6 devices on my account as expected. I wonder if signing out on the iPad, enabling it on your phone, and then signing back in would fix it?

[@kgeeslin4339]

I had instructions ! Disconnect from my iPad and watch.

[@kgeeslin4339]

Can I reconnect afterward to my other devises? Thanks so much for your presentation with upgrade.

[@rajvinjamuri7]

Why isn’t it automatic and opt-in?

[@jonaharagon]

Probably because it requires all the devices on your account to be updated to the latest iOS/macOS/iPadOS version first.

[@Raymazon]

Well done and helpful. Thank you.

[@anniegotyourhome]

explained so clearly, thanks Jonah!!

[@RealCatWeekly]

Can’t believe you only have 1k subscribers, your content is amazing

[@Brandonee916]

Great video! Explained it perfectly 👍🏻👍🏻

[@tom6039]

This is exactly what I was looking for in a video explanation

[@markpeoples4513]

Thank you. Very informative.

[@anoldslowhorse]

great video ...

[@xNecromancerxxx]

This still doesn’t make sense to me… If you give “Alice” the key, how do you know it’s actually Alice and not Tim or Sam? This makes no sense to me…

[@jonaharagon]

If you’re referring to the manual code comparison: The idea with key verification is that you do the initial comparison physically in person by comparing codes on the screen.
The phone can handle future connections after that, but you being in the same room as “Alice” and performing the verification there is what builds the initial trust.

[@TorchySmurf]

I don't think my mom is going to go for this.

[@Micmouse1]

Where have you’ve been - you explain it so well and your voice is universally sound…. 👊🏻👍🏻

[@srknkb]

Please add more tech videos on iPhone/ios/apple …

[@Soham88990]

I’ve tried doing this with my wife’s iPhone. My contact is showing as verified on her iPhone. But her contact number isn’t showing as verified on my iPhone. I try to verify code on my device and then her contact card comes up, I press update but nothing happens.

[@emmanuelmiranda5551]

Did it got fixed? It happen to me as well with my wife