3 ms·
Could you encrypt a file with a public key and expose it via web server that another server scrapes later. Maybe with a common url like example.com/deaddrop. Th
by redman25 2y ago
Could you encrypt a file with a public key and expose it via web server that another server scrapes later. Maybe with a common url like example.com/deaddrop. The dead drop server would decrypt the scraped file with the private key. You would have plausible deniability because any other site could have a dead drop endpoint with encrypted files. They would be indistinguishable from any others.
- VoidWhisperer 2y agoI think the issue with that might be that it would be relatively easy (especially with nation state level powers) to identify who paid for the server and/or domain, making it defeat the purpose. Also that aside, many whistleblowers are not necessarily technologically inclined people, so this would not necessarily work well due to that too
- lelanthran 2y ago> I think the issue with that might be that it would be relatively easy (especially with nation state level powers) to identify who paid for the server and/or domain, making it defeat the purpose. So? Post it on craigslist (or reddit/twitter/mastodon/youtube comment/wherever). Most of those need logins, but so what - use a fresh account for each dead drop.