3 ms·
Your Android phone, now with NSA-grade security The strength of the encryption is and was never a problem. One of the biggest hurdles for widespread adoption
by danbruc 12y ago
Your Android phone, now with NSA-grade security
The strength of the encryption is and was never a problem.
One of the biggest hurdles for widespread adoption in the private sector is that encryption is perceived to cause friction between users [...] With that in mind, Vitru has managed to keep friction to a minimum.
Key management is indeed the main problem but the article has nothing to say how they attacked the problem.
Virtru’s Android encryption enables users to control access to email messages and files and can be “revoked” at any time. Users can also set expiration dates for sensitive email.
No, that does not work. Screenshot. Revoking may work within a specific client but to become really successful you will most likely have to open the protocol to alternative clients and that's the definite end of revoking or expiring messages.
- hackcasual 12y agoThey say how they've attacked the problem. And its as stupid as you would imagine: https://www.virtru.com/how-virtru-works https://www.virtru.com/how-virtru-works I'm guessing the system works by sending the encrypted item out-of-band. Revocation could be done by the key server. Though there's nothing to prevent designing a client that automatically grabbed the key material when an encrypted message was sent.