I still have my doubts about their privacy practices, I would love to see a detailed technical article on how the actual PKI infrastructure works. I could regi

I still have my doubts about their privacy practices, I would love to see a detailed technical article on how the actual PKI infrastructure works. I could register and (apparently) generate a private RSA key, which was sent to mega.co.nz as part of a HTTP POST payload. I wonder if that's only used for the current session, which I guess is mandatory, but I'd like to understand more: how does the model work for sharing, for instance.