6 ms·

Then, we need a good service to store keys, with a key to get to your key

• toyg 11y ago
  And that will be a sweet, sweet target...
• jfindley 11y ago
  I wrote a PoC app [0] a while ago to do just this - allow storing and sharing of keys, with the server holding the encrypted keys never seeing the decryption key. Sharing a key involves downloading it from the server, asymetrically encrypting it with the public key of the reciever, and uploading to the server again. It also allowed sharing with groups via intermediate keys decrypt-able by multiple users. Obviously it's just a PoC - noone should use it for actually important data, and I certainly don't promise that it's actually secure - but it does (more or less) work. As it requires client-side crypto, it's not an ideal candidate for a web-service either (although one could potentially use browser extensions to make that more reasonable). 0: https://github.com/jfindley/skds https://github.com/jfindley/skds
• kgilpin 11y ago
  Can't this just be my phone?
  • Filligree 11y ago
    And when your phone breaks...?