2 ms·
> It's possible to design a system that lets the government decrypt (essentially) everything. The same technology that lets you send a PGP e-mail with two recip
by cesarb 9y ago
> It's possible to design a system that lets the government decrypt (essentially) everything. The same technology that lets you send a PGP e-mail with two recipients allows you to send a message that can be decrypted by the NSA as well as your recipient.
It's not that simple. That "solution" has the government key as a single point of failure: when it leaks, everything is compromised.
- michaelt 9y agoSo put it in a Hardware Security Module [1] and store it in Fort Knox. Competent certificate authorities manage to store their private keys and not leak them. And the security community loves SSL, even though it depends on that. [1] https://en.wikipedia.org/wiki/Hardware_security_module https://en.wikipedia.org/wiki/Hardware_security_module