Rather than add a backdoor, Apple decides to kill iCloud encryption for UK peeps

Infosec in brief Apple has responded to the UK government's demand for access to its customers’ data stored in iCloud by deciding to turn off its Advanced Data Protection (ADP) at-rest end-to-end encryption service for UK users. Cupertino’s decision came after a row that began earlier this month amid reports that the UK Home Office had requested a backdoor to access data belonging to UK citizens under the auspices of the Investigatory Powers Bill. "We are gravely disappointed that the protections provided by ADP will not be available to our customers in the UK given the continuing rise of data breaches and other threats to customer privacy," Apple told The Register in a statement. The end-to-end encryption afforded by ADP is therefore off the table for UK residents, meaning both Apple and law enforcement agencies that secure a subpoena or some other suitable court order will be able to obtain requested iCloud-hosted data without the need for direct backdoor access. Apple noted that some data stored in iCloud is still protected by its encryption, including health info, iMessages, and FaceTime calls. iCloud backups, storage, photos, notes, reminders, Safari bookmarks, Siri shortcuts, Wallet passes, voice memos, and Freeform digital whiteboard files, however, will no longer be end-to-end protected at rest, meaning they can be read by Apple and those who subpoena it. And to be clear: This is all about people's data stored in iCloud, encrypted in such a way that not even Apple can...