It’s possible that they could encrypt and anonymize this data with yet another set of tokenization, but that would be quite an effort on their part. As for not keeping the data, the mid data, itself, is necessary in order to coordinate the sending and delivery of push notifications between apps, services, and your devices. It needs to exist.
Comment on Apple Makes It Harder for Police to Access Your Push Notifications
ItsComplicated@sh.itjust.works 6 months ago
Would it be possible for Apple to just encrypt this data or, not keep this data? Then there would be nothing to give law enforcement or government. (Forgive my ignorance, I have no idea how all this works.)
gregorum@lemm.ee 6 months ago
kirklennon@kbin.social 6 months ago
The developer of the app sends the push notification through Apple's service. Developers have always been able to encrypt it, at which point it can be decrypted only by their app, but not all developers do this. There's also still limited metadata about the fact that a notification was sent, even if the contents are encrypted.
ItsComplicated@sh.itjust.works 6 months ago
Would it not make more sense to remove metadata and not even collect it? Maybe have an encrypted protocol for push notifications all developers use regardless of the app?
skulblaka@kbin.social 6 months ago
Your phone has to be informed somehow, from the internet, that it has data to present as a notification. The fact that you got a notification at 3:32 and then again at 3:35 is trackable data, pretty much no matter what anyone does with it, encrypted or not. Doubly so if someone has MITM attacked your data stream. They may not know what the notification contains or even what app it was sent to, but the act of transmitting and then receiving this data packet over cell network or internet is a trackable event. And I don't really know what Apple could even do about that beyond attempting to build Internet 2 solely for the purposes of keeping the cops out of it, which is unlikely at best.
lemann@lemmy.one 6 months ago
Honestly I think developers should just use push notifications to tell the app to fetch an update from their server. Or do what Element and Syncthing do, which is bypass that entire Google push infrastructure (FCM, formerly GCM?) and connect to their own ones instead - at the expense of some additional battery consumption, particularly when there’s poor cell service
LWD@lemm.ee 6 months ago
kirklennon@kbin.social 6 months ago
They do. Keep in mind that Apple is sending literally trillions of push notifications per year and certainly doesn't want to save them longer than necessary (a useless expense), but the government can also ask that information for a targeted user be retained, going forward from the request, even though it would normally be purged.
Avanera@kbin.social 6 months ago
Because protecting user privacy is not a priority.