3 ms·
Right - that's the part that I have a really hard time believing. Even having a single decryption key per device seems insane - isn't it pretty standard practi
by ghshephard 11y ago
Right - that's the part that I have a really hard time believing. Even having a single decryption key per device seems insane - isn't it pretty standard practice to frequently rotate your session key? I'm wondering if this was something that Blackberry was doing back in the early 90s, and, as the state of the art advanced, they never upgraded their systems.
It really sounds terribly insecure to me.
- coldcode 11y agoHow are these people still in business?
- mschuster91 11y ago> I'm wondering if this was something that Blackberry was doing back in the early 90s, and, as the state of the art advanced, they never upgraded their systems. It's called backwards compatibility... though that's not really an excuse.
- misnome 11y agoCouldn't the message could have the "real" encryption key encrypted with the private blackberry key, thus allowing them to access it if required?