3 ms·
>wrapping the ciphertext in AES, with a constant key of "123NSA". Posting the public key URLs publicly was a big part of the use case I imagined. It's well kno
by popcalc 4y ago
>wrapping the ciphertext in AES, with a constant key of "123NSA".
Posting the public key URLs publicly was a big part of the use case I imagined. It's well known that armored PGP text gets immediately swallowed up by all kinds of actors scraping the internet. Public keys are valuable metadata and can come in handy ten years down the line for an intelligence org. The AES thing is nowhere near a solution, but a tiny bandaid.
- makeworld 4y agoIMO this site should not allow key upload, forcing users to use ephemeral keys generated by the website, so they're only ever used for this purpose. Then you don't need to worry about them being public and can do away with the AES encryption. This is a cool site though, nice work!