3 ms·
> but ultimately doesn't there have to be someone who solely controls the changing and sharing of the password, and granting privileges? Not necessarily. You c
by Someone 3y ago
> but ultimately doesn't there have to be someone who solely controls the changing and sharing of the password, and granting privileges?
Not necessarily. You can set up things so that that requires two persons (https://en.wikipedia.org/wiki/Two-man_rule https://en.wikipedia.org/wiki/Two-man_rule), or any 3 out of a group of 5, etc (https://en.wikipedia.org/wiki/Shamir%27s_secret_sharing https://en.wikipedia.org/wiki/Shamir%27s_secret_sharing)
- fragmede 3y agoMore specifically, http://point-at-infinity.org/ssss/ http://point-at-infinity.org/ssss/
- justin_oaks 3y agoIt's nice to have an implementation of Shamir's secret sharing. I was able to try it out by installing the package via Debian. It's unfortunate that this site only is HTTP-only and doesn't offer SSL/TLS. For an application using cryptography, it strikes me as odd that it wouldn't be available over a secure channel. It's also odd that there are SHA-1 hashes of the downloadable files since those hashes are also presented over an insecure channel.