5 ms·
> there's always a fallback if you lose all the copies of your key: you pay a locksmith to come pick the lock and rekey it. In the digital world you have Shami
by gioele 11y ago
> there's always a fallback if you lose all the copies of your key: you pay a locksmith to come pick the lock and rekey it.
In the digital world you have Shamir's Secret Sharing. Generate a non-encrypting, non-signing, decode-only key and give a N-th of if to N escrow services. If you lose your key you contact M of those entities and recover the data.
Plenty of tricks have been created in the last two decades to address the problems associated with key ownership, the problem is always the lack of UI and of standardization in general.
- whopa 11y agoThese escrow services would be centralized targets too just like Microsoft, Google, Amazon, etc.
- morninj 11y agoI think the idea is that you store only part of the key with each service, and you're the only one who knows which services have which parts--so, you're the only one who can reconstruct the key. Of course, the UI is still a problem.
- mjevans 11y agoWho says you need escrow services for that? Store your N'th fragments with /friends and family/ that you know well. You might also be able to get in on distributed backups together.
- tajen 11y agoHere comes Facebook Key Escrow?
- NoGravitas 11y agoThanks. I did not know that.