3 ms·

Thanks! The secret client key stays in the browser or app. It's used to encrypt queries, and decrypt the server responses.

• brap 4y ago
  Right, but is it generated under the hood for each query? And how is the data that was initially written encrypted/decrypted? who holds the key for that?
  • blintz 4y ago
    Yes, it's generated in the browser for each query. And this depends on the application - for example, for the private password checker, all the dumped passwords data is from a public dataset, so its not encrypted. In messaging, the data would be encrypted under the intended recipient's public key.