While Apple has just adopted the RCS protocol for communications between iPhone and Android, the FBI and CISA are issuing an important warning regarding the security of cross-platform messages. A worrying situation which particularly affects iPhone users in their daily exchanges. Additionally, the FBI advises using encrypted messaging apps like WhatsApp or Signal to protect against data leaks.
Apple’s RCS not secure enough
Apple’s recent integration of the RCS protocol, planned for 2024, does not resolve all security issues. Indeed, the version adopted by the Cupertino company does not include end-to-end encryption for communications between iOS and Android. A significant limitation which makes these conversations vulnerable to interception, in particular by the Chinese hacker group “Salt Typhoon”.
If communications between two iOS users (with iMessage) or between two Android users are perfectly secure thanks to integrated encryption, the problem arises specifically during exchanges between the two platforms.
Recommended alternatives for iPhone users
Faced with this situation, the American authorities strongly recommend the use of third-party applications offering complete end-to-end encryption. WhatsApp is positioned as an alternative of choice, available for free on the App Store and offering maximum protection for cross-platform conversations. Signal also represents a particularly secure option, favored by cybersecurity experts. As a reminder, Telegram is not encrypted by default and its use is therefore not recommended.
For iPhone users accustomed to iMessage, these recommendations imply a significant change of habit. However, communications security must take precedence, especially as recent attacks have demonstrated the vulnerability of traditional telecommunications networks. The much-maligned green bubbles of SMS/RCS conversations between iPhone and Android could therefore give way to the secure interfaces of third-party messaging applications.
Interestingly, Apple, usually at the forefront of security and privacy, has yet to implement end-to-end encryption in its version of RCS. A choice that could evolve if enough users migrate to alternative solutions. In the meantime, iPhone owners who communicate regularly with Android contacts have every interest in favoring applications like WhatsApp or Signal for their daily exchanges.
