If anyone manages to make a messaging app that both has strong security and is user friendly and supports features users expect, they will become very rich. Seeing as no one has even proposed a solution in theory, it's most likely unsolvable. I'll bet if you can formulate it clearly enough, you can even prove it so.
Look at say, Dark Mail. After all that hype, their design is "uh basically SMTP+TLS, or PGP if you're paranoid".
The only thing that comes close is PGPfone and similar things (ZRTP). And that's because when you call someone, there's an obvious and built-in verification system, voice. (Note: doesn't work as well with deaf people or async comm).
So pointing out Apple fails here? Yes, sure. Expecting anything different? Seems very unlikely. Either they'd break all user expectations, or they'd get an NSL/court order to break the whole system in order to comply with a wiretap.
> If anyone manages to make a messaging app that both has strong security and is user friendly and supports features users expect, they will become very rich.
How so? Who's going to pay for it?
I reckon I could do it, you know. Use PGP for the backend (duh) but take some time off work, hire actual designers for the UI, make the identity verification step make sense for the user. But 98% of users don't care about security, and 98% of the remainder can't tell the difference between good and bad security.
> If anyone manages to make a messaging app that both has strong security and is user friendly and supports features users expect, they will become very rich. Seeing as no one has even proposed a solution in theory, it's most likely unsolvable. I'll bet if you can formulate it clearly enough, you can even prove it so.
Look at say, Dark Mail. After all that hype, their design is "uh basically SMTP+TLS, or PGP if you're paranoid". The only thing that comes close is PGPfone and similar things (ZRTP). And that's because when you call someone, there's an obvious and built-in verification system, voice. (Note: doesn't work as well with deaf people or async comm).
So pointing out Apple fails here? Yes, sure. Expecting anything different? Seems very unlikely. Either they'd break all user expectations, or they'd get an NSL/court order to break the whole system in order to comply with a wiretap.