<story><title>Governments spying on Apple, Google users through push notifications</title><url>https://www.reuters.com/technology/cybersecurity/governments-spying-apple-google-users-through-push-notifications-us-senator-2023-12-06/</url></story><parent_chain><item><author>robbiet480</author><text>We at the Home Assistant Companion for iOS team have been wanting to implement end to end encryption for our push notifications for a while now but Apple has denied our request for the com.apple.developer.usernotifications.filtering [0] entitlement multiple times. Wondering if with today&amp;#x27;s news we could apply again and get it.&lt;p&gt;For context, we are sending ~35 million push notifications per month on iOS and ~67 million on Android, see more at [1]&lt;p&gt;[0]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;developer.apple.com&amp;#x2F;documentation&amp;#x2F;bundleresources&amp;#x2F;entitlements&amp;#x2F;com_apple_developer_usernotifications_filtering&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;developer.apple.com&amp;#x2F;documentation&amp;#x2F;bundleresources&amp;#x2F;en...&lt;/a&gt;&lt;p&gt;[1]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;threadreaderapp.com&amp;#x2F;thread&amp;#x2F;1721717002946191480.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;threadreaderapp.com&amp;#x2F;thread&amp;#x2F;1721717002946191480.html&lt;/a&gt;</text></item></parent_chain><comment><author>st3fan</author><text>We implemented APNS encryption for Firefox iOS without much trouble. Keys are negotiated out of band and message decryption is done in a Notification extension that allows you to pre process incoming notifications. Did not need any special entitlements.&lt;p&gt;Source code on GitHub.com&amp;#x2F;mozilla-mobile</text></comment>
<story><title>Governments spying on Apple, Google users through push notifications</title><url>https://www.reuters.com/technology/cybersecurity/governments-spying-apple-google-users-through-push-notifications-us-senator-2023-12-06/</url></story><parent_chain><item><author>robbiet480</author><text>We at the Home Assistant Companion for iOS team have been wanting to implement end to end encryption for our push notifications for a while now but Apple has denied our request for the com.apple.developer.usernotifications.filtering [0] entitlement multiple times. Wondering if with today&amp;#x27;s news we could apply again and get it.&lt;p&gt;For context, we are sending ~35 million push notifications per month on iOS and ~67 million on Android, see more at [1]&lt;p&gt;[0]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;developer.apple.com&amp;#x2F;documentation&amp;#x2F;bundleresources&amp;#x2F;entitlements&amp;#x2F;com_apple_developer_usernotifications_filtering&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;developer.apple.com&amp;#x2F;documentation&amp;#x2F;bundleresources&amp;#x2F;en...&lt;/a&gt;&lt;p&gt;[1]: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;threadreaderapp.com&amp;#x2F;thread&amp;#x2F;1721717002946191480.html&quot; rel=&quot;nofollow noreferrer&quot;&gt;https:&amp;#x2F;&amp;#x2F;threadreaderapp.com&amp;#x2F;thread&amp;#x2F;1721717002946191480.html&lt;/a&gt;</text></item></parent_chain><comment><author>michh</author><text>for my understanding, you need that entitlement so you can send an encrypted invisible notification which you can then decrypt locally in your app and push out again as a local notification that doesn&amp;#x27;t go over the network (i.e. not use apns)? Or is doing this kind of stuff just weirdly tied to that specific entitlement?</text></comment>