6 ms·

> The private key is encrypted with the user's password, which is not retained by Apple except in a hashed form. > the private key is decrypted using the passw

by ninjay 13y ago

> The private key is encrypted with the user's password, which is not retained by Apple except in a hashed form. > the private key is decrypted using the password and sent to the device. wait, where is this private key coming from then? your other devices?

nknighthb 13y ago
Either Apple would generate it server-side, or the first device to "sign up" would generate it. Remember, I'm only explaining a hypothetical method by which the Apple system could work, consistent with Apple's statements and behavior I've observed from my iPhones, iPads, and Macs. It's not an explanation of a strictly secure system.
- ninjay 13y ago
  > would generate it. where is it stored though?
  - rdouble 13y ago
    in the Keychain
    - ninjay 13y ago
      sigh
      - nknighthb 13y ago
        Did you fundamentally misinterpret my sentence? The password is not retained by Apple, the private key is retained, in encrypted form.