3 ms·
Hopefully the mailbox encryption key is actually static, and they only store it encrypted with a key derived from your login password. If you use two different
by vesinisa 10y ago
Hopefully the mailbox encryption key is actually static, and they only store it encrypted with a key derived from your login password. If you use two different salts the knowledge of the login pw hash does not yield the mailbox key encryption key.
- vabmit 10y agoThe mailbox encryption key is static. There is no need to re-encrypted all the mail when it is changed. Since the PGP Secret Key is only decrypted in the client browser or app, there is no need to transmit the decryption password to the server.