3 ms·
Sure you can, just prefix the encrypted identifier with a version number. https://app.example.org/file/1:abcdef12345 -> decrypt abcdef12345 with key "
by remram 3y ago
Sure you can, just prefix the encrypted identifier with a version number.
https://app.example.org/file/1:abcdef12345
-> decrypt abcdef12345 with key "1" to yield UUIDv7 key of file (no matter what the latest key is)
- andix 3y agoAn incrementing version number would once again leak time information. Even a not incrementing version number would leak that kind of information, because if you know the timestamp of another ID with the same version. I think there is no good alternative to random external identifiers.
- remram 3y agoOh that's a good point.