News for hackers. Stuff that matters.
Re:AWS Support able to access any S3 object due to permissio... by L0g4n on Thursday December 23, 2021 @09:07AM (#29661903)
Just skimmed it, looks useful, with mentioning keypair I'm assuming they use RSA keys or something similar. Why the choice for asymmetric encryption?
Re:AWS Support able to access any S3 object due to permissio... by guitarbill on Thursday December 23, 2021 @11:41AM (#29663533)
The code says it uses the public key for uploading/encryption, and the private key for downloading/decryption. It's useful to be able to split writing and reading with cryptographic guarantees, for security or organisational purposes. E.g. if a client only has the public key and should it be compromised, it can't read the data. Or it allows you to have less strict access controls on uploading clients.