Modes like this are not intended to provide hard security. They are not designed to deal with malicious recipients. Rather, they're intended to provide a barrie

Modes like this are not intended to provide hard security. They are not designed to deal with malicious recipients. Rather, they're intended to provide a barrier to accidental or unthinking dissemination of confidential content. It is also designed to prevent permanent retention and the ongoing risk that represents. It solves or limits the fallout from the "silly friend" and "new enemy" problems. There is no way to convey information to a malicious human s.t. that human cannot convey it onwards to unwanted recipients. The best you can do is provide strong disincentives. Some options for doing this: make sure that your recipients generally don't want to hurt you. Make them fear you (even that doesn't always work, see [1]). [1]: https://en.wikipedia.org/wiki/Reality_Winner https://en.wikipedia.org/wiki/Reality_Winner