3 ms·
You don't see a difference in protection posture between something which has to be used in the wild vs something which could be kept in a vault for it's entire
by Godel_unicode 7y ago
You don't see a difference in protection posture between something which has to be used in the wild vs something which could be kept in a vault for it's entire lifetime? I'm not arguing that escrow is a good idea, I'm arguing that this argument is not why that's true.
Edit: consider how often keymat has leaked.
- Nasrudith 7y agoThere isn't one really - if they had access to it the same logistical issues would come up no matter how much they pinky promise not to abuse it. The more it spreads the more vulnerable it is The only way key escrow would be remotely trustworthy would be if there were "hostages" to provide an intrinsic punishment for their failures or stonewalling of transparency.
- natch 7y agoYou really think the keys will stay in a vault? And you think this because you have assurances from who? The NSA? Xi Jinping? MBS? Kim Jung Un? Diane Feinstein? Donald Trump? RSA Inc.? NIST? David Sternlight?