4 ms·
if you've got to communicate the decryption key separately anyway, might as well just use password protected zip files, no?
by dariusj18 4y ago
if you've got to communicate the decryption key separately anyway, might as well just use password protected zip files, no?
- mprime1 4y agoIndeed, it's functionally similar to password-protected PDF or ZIP for some use cases. You should probably not treat password-protected zips as secure: https://security.stackexchange.com/questions/35818/are-password-protected-zip-files-secure https://security.stackexchange.com/questions/35818/are-passw...
- maqp 4y agoThe argument your answer makes discusses confidentiality issues with passwords in Zip-files, yet the Portable Secret application doesn't take any major steps or use best practices like Argon2 to solve "brute forcing the password" problem.