TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

New GnuPG Feature: The Additional Decryption Subkey

2 点作者 upofadown大约 2 年前

1 comment

upofadown大约 2 年前
The idea here is applicable to end to end encrypted messaging in general. Basically the identity information for a user specifies more than one encryption key in a secure way. Someone sending a message to that user then knows that the user wants the message encrypted for all the given encryption keys.<p>The idea here is to make end to end encryption more acceptable to companies with compliance or legal obligations to archive messages. It is generally applicable to any situation where the employee is unavailable to decrypt their messages where that is a problem.<p>The second encryption key of an employee would be the archive identity. The archive identity would be controlled by a trusted person or persons who would only have to dig into the archive if there was an actual issue. Otherwise the archive could be left secure.
评论 #35762384 未加载