A researcher in Germany has discovered that email attachments for POP, IMAP and ActiveSync accounts are not encrypted when stored on certain Apple devices, iPhone 4, iPhone 5s and iPad 2. Leaving email attachments visible on the firmware iOS 7.04, 7.1 and 7.1.1.
Attachments on the iPhone 4s, 5s and 5c running the latest iOS platform are secure for now.
This is contradictory to Apples claim that email attachments are encrypted at rest with iOS7, it’s clearly stated on Apples website that any Apple device newer than the iPhone 3GS is protected by encryption.
Apple states that encryption on the devices protects “…your email messages attachments, and third-party applications.”
Apple is aware of the occurring issue, but have not scheduled a time for fixing the bug.
The Register:
https://www.theregister.com/2014/05/02/nope_ios_email_attachments_arent_encrypted/
ZD Net:
https://www.zdnet.com/article/ios-7-doesnt-encrypt-email-attachments/
