4 ms·
Rotating a key involves retiring the old one. If 20 year old keys remain valid and URLs encrypted with them still work, you’re not getting any value out of key
by jameshart 3y ago
Rotating a key involves retiring the old one.
If 20 year old keys remain valid and URLs encrypted with them still work, you’re not getting any value out of key rotation. If an old key leaks or is cracked, the entire system is useless.
Remember the point of encryption here is basically integrity - to verify that the parameters were generated by the site’s own share capability.
- runlevel1 3y agoI only claimed a minor barrier to unmotivated tracker stripping. By that I mean a hurdle, not tamper resistance. So in the worst case you're no worse off than what the existing unencrypted system affords you. Indeed, rotating the key here serves very little benefit. Thinking out loud: I suppose if they strayed further from the light and started restricting timestamp linking to share button URLs they might want to rotate the key to frustrate anyone looking to generate anonymous timestamp links. In that case, you could do something like include some indicator of which key was valid on the day it was uploaded. That limits the blast radius of a leaked/cracked key to the ability to generate timestamp links for all videos created during that period. Still low stakes, but now we need care more about integrity. Also, I wouldn't be surprised if updating the video ID scheme is a huge ask, so at that point a new DB might be the easier solution.