3 ms·
"Each AeroFS device has its own 1024bit RSA key pair, which is certified by us to be authentic." That suspiciously reads like the AeroFS people get a copy of y
by blocke 16y ago
"Each AeroFS device has its own 1024bit RSA key pair, which is certified by us to be authentic."
That suspiciously reads like the AeroFS people get a copy of your key. If that's the case then it's only marginally more secure than DropBox. Hope I'm reading that wrong...
- yurisagalov 16y agoWe don't get a copy of your private key (neither should anyone else, ever). We do get a copy of your public key, to certify it (we use OpenSSL's CA)
- blocke 16y agoSo how do you "invite" someone? Swap public keys?
- weihan 16y agoWe generate a temporary password for the user being invited and encode it in the invitation code sent to the user's email address. We use this temp pass to verify the user when he/she signs up and destroy the pass immediately after. During initial setup, the user's device generates its own public key pair and sends a CSR (certify signing request) to us for certification.