Apple Websites Can Leak Apple ID Passwords - Protect Yourself With a VPN!

When Apple claimed victories over the battle with FBI, a flaw in their self-proclaimed impenetrable defense was exposed. Although, the law suit was won, a seed of doubt regarding its secure walls was sown.

The security levels of Apple devices

Most websites, like Apple can be accessed in two ways: www.apple.com or apple.com. The former as a lower security grade because sites such as these consider RC4 cipher with a downgraded protocol. Without the 3ws, the security is high but falls short because Forward secrecy is not supported. As no entry of confidential information is uploaded, using either of the two sites, the flaw presented can be considered minor.

Not known to most, the degree of security varies within the website. Apple has three sub domains- support.apple.com, www.apple.com and iforgot.apple.com. When an iDevice is purchased, an account is created at the secure2.store.apple.com- the ideal example of a flawless security system.

The main entry way for hackers to access personal information of iDevice users is through their password and Apple ID. There are two pages where the ID is required- the log in page and idmsa.apple.com, both lacking the support of Forward Secrecy.

Why the lack of forward secrecy concerns you

The working details of forward secrecy are intricate but the basic principle is straightforward. When a website ignores the inclusion of forward secrecy, the level of encryption used by the password is recycled. On the other hand, when forward security is employed, with each new access a different level of encryption is used.

If you’ve gone through the iCloud security and privacy overview, there is a section which reads that all information is channelized through an encrypted SSL server. This level of security is high but Apple lacking Forward Secrecy is as incompetent as using a dead bolt on the main door, but leaving the living room wide open. One channel of access is heavily guarded while the other is easily accessible.

The Solution to Apple’s Security Hole

Only Virtual Private Networks (VPN) offer impregnable data security. Apple user’s need not fear the leak of ID and password because all the data transmitted is encrypted at the end of the tunnel. VPN allows secure browsing by making the identity and location of the user untraceable. Switch to VPN today and say goodbye to online data security concerns.