Even if you’re using a private messaging app like #Signal:
- All your messages show up on your iPhone/Android in your notifications.
- All notifications are sent through Apple’s servers in the case of iPhone, and Google’s servers in the case of Android.
Does this mean Apple and/or Google can read all your messages?
#asknostr #privacy
Yes. Change the settings or use a different client
Change what settings? Use what other client?
Notification settings. Try Molly.
Even if you turn off notifications, they are still being sent through Apple servers. Your phone simply doesn’t display them. So that doesn’t help.
What is Molly?
Also means MDMA
I imagine they cannot because messages are encrypted. However, they can see this traffic.
How does one know that the messages are encrypted such that Apple cannot read the messages?
I don't knowm. Because this is closed source only someone from inside can tell for sure and only if it's a trusted person.
Otherwise, get off Google and apple.
Grapheneos with zap.store and ntfy.sh
On iOS, it appears to be possible to end-to-end encrypt notification payloads, so that they only get decrypted locally on the recipients device: https://stackoverflow.com/a/42073503
In that case, Apple would not have access to the message content contained in the notification.
However, do apps like Signal actually do this?
Signal has the possibility to use its own notification service if Google Play Services are not recognized on install. It runs a background service that might consume more battery. In general:
Notifications can be e2e encrypted by the apps that send them - at least on Android (guess same for iOS). Proton does that.
However, there are reports of American agencies using their surveillance network to combine all notification data to create connections between them. That way they are able to tell who sends a message to whom (by matching exact timestamps) - even if content may be encrypted.
I'm not sure about Apple but on Android the only notification Signal gets is a "wake up" that tells it to go and retrieve a message from the server. There is also the ability to turn off displaying message content in the drop-down which I advise all to do.
So no, Google can't read your Signal messages.
use #session or #simplex is way better than any other because it has a great feature like no personal identified information #pii no ids nothing.
