3 ms·
I want an ephemeral channel, with an audit trail of accesses. My regular communications channels provide very nearly the opposite -- they're long-lived, and I
by andrewaylett 3y ago
I want an ephemeral channel, with an audit trail of accesses. My regular communications channels provide very nearly the opposite -- they're long-lived, and I can't tell how often folk access them. They might also show history on-screen at times that are inconvenient for security, and I don't know what kind of notifications the recipient has set up.
A tool like Bitwarden Send lets me share a link that references a secret, limit the number of times it may be accessed, and validate out of band (using the secure channel you mention) that the single access I saw was indeed the intended recipient. I can -- and do -- confirm receipt and clear the shared value before putting the secret into whatever system it's intended for.
This seems to have similar properties. I still want an E2E channel for passing the links around, but once the exchange has been verified there's no permanent record of the actual value being exchanged in our chat history.